IPsec connection FortiGate <-> Fritz Box 7490 issue

[Bitz0r]

Hello together,

I have a little issue with the phase 1 connect state from my fortigate to a remote fritz.box

The configuration on a fritz.box is very limited but it is possible to use a ipsec vpn.

My configuration is:

Authentication:  PSK  IKE V 1

Mode: Main

Phase 1:

Encryption AES 256 + SHA 1

DH Group : 2

Key Lifetime 8600

Local ID: -

XAUTH:  Disabled

At the fritz.box my only options are:

Remote IP, 

PSK,

Key-ID

Now I don't know exactly what they mean with key-id.

Where can I create a id in my fortigate to establish a connection ?

[Toshi_Esumi]

I don't know what Fritz box's behavior, but try leaving key-id blank if it accepts. Or set its public IP(NAT outside IP). 

[emnoc]

On the fitz box key-id is the vpn_user name. So are you trying to use the fortigate as a dialup server to the fitz box? Do you have a dialup vpn setup on the fortigate?

You will need to set up the fortigate for dialup with a local-user account ( use a local user 1st ) and then populate the fitz with the pre-shared key, username and gateway. You might need to mess with the fortigate ciphers to ensure they match the fortigate ph1/ph2.

Ken Felix