Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 1 reply
  • Answers 1 answer
  • Subscribers 26 subscribers
  • Views 415 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IP Sec tunnel between SOPHOS XG and Fortinet not being UP

Kripasindhu Ghosh

Hi,

I was trying to make SOPHOS to Fortinet IPSec VPN. Its not established. When i was trying to collect the strongswan logs getting this message. Someone can guide how to resolve the issue?

2022-01-20 11:28:21 15[NET] <site1-1|42973> sending packet: from X.X.X.X[500] to X.X.X.X[500] (1482 bytes)
2022-01-20 11:29:36 15[IKE] <site1-1|42973> giving up after 5 retransmits
2022-01-20 11:29:36 15[DMN] <site1-1|42973> [GARNER-LOGGING] (child_alert) ALERT: IKE message (7C0021C0) retransmission to X.X.X.X timed out
2022-01-20 11:29:36 15[DMN] <site1-1|42973> [GARNER-LOGGING] (child_alert) ALERT: peer did not respond to initial message 2
2022-01-20 11:29:36 15[IKE] <site1-1|42973> peer not responding, trying again (4/0)
2022-01-20 11:29:36 15[IKE] <site1-1|42973> initiating IKE_SA site1-1[42973] to X.X.X.X
2022-01-20 11:29:36 15[ENC] <site1-1|42973> generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
2022-01-20 11:29:36 15[NET] <site1-1|42973> sending packet: from X.X.X.X[500] to X.X.X.X[500] (1482 bytes)


This thread was automatically locked due to age.
  • 0

    Hello there,

    Thank you for contacting the Sophos Community.

    Based on the log it does look like the other device isn’t responding to our packages.

    Since we aren’t seeing any reply to the packets, you would need to check first on the other device if it hasn’t misconfigured DNAT rules, and what the logs on their end say when the tunnel is trying to be established.

    Regards,