Differences

This shows you the differences between two versions of the page.

--- informatique:fortinet:vpn [2025/01/09 14:43] – pteu
+++ informatique:fortinet:vpn [2026/06/02 07:41] (current) – Liens connexes pteu
@@ Line 232: / Line 232: @@
 diagnose debug application ike 0
 diagnose vpn ike log-filter clear
+</code>
+Exemple d'un affichage de debug :
+<code bash>
+#Phase1: AES128/SHA1/DH19
+[...]
+-01-09 11:25:24.435518 ike 1: negotiation result
+-01-09 11:25:24.435525 ike 1: proposal id = 1:
+-01-09 11:25:24.435529 ike 1:   protocol id = ISAKMP:
+-01-09 11:25:24.435533 ike 1:      trans_id = KEY_IKE.
+-01-09 11:25:24.435537 ike 1:      encapsulation = IKE/none
+-01-09 11:25:24.435541 ike 1:         type=OAKLEY_ENCRYPT_ALG, val=AES_CBC, key-len=128
+-01-09 11:25:24.435545 ike 1:         type=OAKLEY_HASH_ALG, val=SHA.
+-01-09 11:25:24.435549 ike 1:         type=AUTH_METHOD, val=RSA_SIG.
+-01-09 11:25:24.435553 ike 1:         type=OAKLEY_GROUP, val=ECP256.
+-01-09 11:25:24.435558 ike 1: ISAKMP SA lifetime=86400
+#Phase2 AES256/SHA256/DH14
+[...]
+-01-09 11:25:25.679709 ike 1:dialup_88: negotiation result
+-01-09 11:25:25.679714 ike 1:dialup_88: proposal id = 1:
+-01-09 11:25:25.679719 ike 1:dialup_88:   protocol id = IPSEC_ESP:
+-01-09 11:25:25.679723 ike 1:dialup_88:   PFS DH group = 14
+-01-09 11:25:25.679728 ike 1:dialup_88:      trans_id = ESP_AES_CBC (key_len = 256)
+-01-09 11:25:25.679733 ike 1:dialup_88:      encapsulation = ENCAPSULATION_MODE_TUNNEL
+-01-09 11:25:25.679737 ike 1:dialup_88:         type = AUTH_ALG, val=SHA2_256
+-01-09 11:25:25.679742 ike 1:dialup_88: set pfs=MODP2048
 </code>
@@ Line 302: / Line 329: @@
 end
 </code>
+=====Liens connexes=====
+  * [[https://community.fortinet.com/fortigate-3/technical-tip-best-practice-when-ipsec-vpn-is-bound-to-loopback-interface-126444|Technical Tip: Best practice when IPSec VPN is bound to loopback interface]]