User Tools

Site Tools


informatique:fortinet:vpn

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
informatique:fortinet:vpn [2025/01/09 14:43] pteuinformatique:fortinet:vpn [2025/01/09 15:05] (current) – [Debug/Troubleshoot] pteu
Line 232: Line 232:
 diagnose debug application ike 0 diagnose debug application ike 0
 diagnose vpn ike log-filter clear diagnose vpn ike log-filter clear
 +</code>
 +
 +Exemple d'un affichage de debug :
 +<code bash>
 +#Phase1: AES128/SHA1/DH19
 +[...]
 +2025-01-09 11:25:24.435518 ike 1: negotiation result
 +2025-01-09 11:25:24.435525 ike 1: proposal id = 1:
 +2025-01-09 11:25:24.435529 ike 1:   protocol id = ISAKMP:
 +2025-01-09 11:25:24.435533 ike 1:      trans_id = KEY_IKE.
 +2025-01-09 11:25:24.435537 ike 1:      encapsulation = IKE/none
 +2025-01-09 11:25:24.435541 ike 1:         type=OAKLEY_ENCRYPT_ALG, val=AES_CBC, key-len=128
 +2025-01-09 11:25:24.435545 ike 1:         type=OAKLEY_HASH_ALG, val=SHA.
 +2025-01-09 11:25:24.435549 ike 1:         type=AUTH_METHOD, val=RSA_SIG.
 +2025-01-09 11:25:24.435553 ike 1:         type=OAKLEY_GROUP, val=ECP256.
 +2025-01-09 11:25:24.435558 ike 1: ISAKMP SA lifetime=86400
 +
 +#Phase2 AES256/SHA256/DH14
 +[...]
 +2025-01-09 11:25:25.679709 ike 1:dialup_88: negotiation result
 +2025-01-09 11:25:25.679714 ike 1:dialup_88: proposal id = 1:
 +2025-01-09 11:25:25.679719 ike 1:dialup_88:   protocol id = IPSEC_ESP:
 +2025-01-09 11:25:25.679723 ike 1:dialup_88:   PFS DH group = 14
 +2025-01-09 11:25:25.679728 ike 1:dialup_88:      trans_id = ESP_AES_CBC (key_len = 256)
 +2025-01-09 11:25:25.679733 ike 1:dialup_88:      encapsulation = ENCAPSULATION_MODE_TUNNEL
 +2025-01-09 11:25:25.679737 ike 1:dialup_88:         type = AUTH_ALG, val=SHA2_256
 +2025-01-09 11:25:25.679742 ike 1:dialup_88: set pfs=MODP2048
 </code> </code>
  
informatique/fortinet/vpn.1736433815.txt.gz · Last modified: 2025/01/09 14:43 by pteu