[Vpn-help] Phase 1 ok; Phase 2 ok; but tunnel not ok

[Matthew Grooms]

Hugues CHARBONNIER wrote:
> Hi, i'am tryng to use Shrew soft vpn client v 2.0.3 to establish a vpn 
> link with a Fortigate 1000.
> Phase 1 et 2 seem to be ok, but the client is blocked at the step 
> "Bringing up tunnel".
> 

Hugues,

The Fortigate platform uses DHCP over IPsec for dynamic IPsec clients. 
Please have a look at the following document ...

http://www.shrew.net/support/wiki/HowtoFortigate

You will need to use the 2.1.1 client as 2.0.x does not support DHCP 
over IPsec configuration.

-Matthew