Fortinet: Troubleshoot 5 IPSec Site-to-Site VPN Scenarios - FortiGate

Quick introduction into FortiGate VPN troubleshooting tools along with 5 sample scenarios that you may run into when deploying.
0:00 Overview/Topology
0:42 Troubleshooting tools
2:35 Scenario1 - phase1 down
4:16 Scenario2 - phase1 (still) down
6:37 Scenario3 - phase2 down
8:58 Scenario4 - ping failure
11:10 Scenario5 - ping (still) failure
15:39 Wrap Up

[@jobyit]

Brilliant, this would really help FortiGate engineers to fix all the s2s related issues.Awesome.......

[@CiZiK22]

Interesting video, well done ! Thanks

[@aarushsingh2006]

It was really to the point. Thanks mate.

[@netconfig999]

thanks for sharing

[@amitkoolmar]

Amazing content! Thanks so much!

[@bjaspidey]

Excellent video!

[@michaelcarreira2638]

Wow what great content!

[@jayanvv-oi8hp]

great content 🤝

[@ernof4271]

thanks mate, very usefull information for me

[@ravishere-mn6no]

Thank you very much for the video !!

[@Quick_UnBoxing0]

Amazing 🎉

[@bowser101]

great job, tks!

[@carloscortes8761]

i love ti, thanks

[@Zdawoud]

Thanks (Y)

[@murugansridhar7909]

❤

[@raikone14]

tks, nice vide, if you allow me to make a question, if nat t is enable I should expect traffic in port 500 as well in phase1 ? or 4500 ? I am confuse

[@tothepointfortinet3823]

Yes, you should always expect traffic on port 500 regardless of NATT, NATT is specific to phase2
Here's the ports/protocols to expect depending on whether NATT is in use or not:
NATT NOT being used:
phase1 = UDP 500
phase2 = ESP (ie. IP protocol 50)
NATT being used:
phase1 = UDP 500
phase2 = UDP 4500

[@raikone14]

@@tothepointfortinet3823 tks a lot for the reply..you are a nice person :)

[@netadministrator1371]

i already creat site to site.its successful to connect but the other side i cant ping thier ip (local ip's).

[@loidrama4721]

Sir my problem is that all Connections are up but no Incoming Data and Outgoing data were made.

[@tothepointfortinet3823]

Might want to check firewall policy config, ipsec selectors and routing config. If you still have trouble check out my video on sniffer. Then it might be good to call support