[vpn-help] Fortigate DHCP is not working

Nicola Bressan nicola.bressan at smc.it
Thu Aug 11 05:16:44 CDT 2011


What settings do you need to know?
i'm using DH Mode 2, AES256 SHA1 for both phases.

> What are all of your settings? What mode are you using for the VPN?
>
> On Sun, Aug 7, 2011 at 11:03 AM, Nicola Bressan
> <nicola.bressan at smc.it>wrote:
>
>> I did it in an Arkoon fw, in fact their proprietary client is working
>> with
>> the same settings, but shrew client keep saying no dhcp answer from gw
>> and
>> on fw log i see can't answer 'cause no SA connection is known for ...
>> and it
>> states a SA currently available and configurered on fw.
>>
>> Sent from my iPhone
>>
>> Il giorno 07/ago/2011, alle ore 09:19, Noach Sumner
>> <nss at compu-skill.com>
>> ha scritto:
>>
>> Currently have the Fortigate working with Shrew. Did you make sure to
>> create the fule to allow the DHCP address to be assigned in the
>> firewall? It
>> sounds like that is probably missing.
>>
>> On Sat, Aug 6, 2011 at 12:52 AM, Nicola Bressan <
>> <nicola.bressan at smc.it>
>> nicola.bressan at smc.it> wrote:
>>
>>> same problem with different firewall, i think there's is a problem with
>>> the vpn client then.
>>>
>>> Sent from my iPhone
>>>
>>> Il giorno 05/ago/2011, alle ore 19:13, brian charles
>>> <<briancharles at hotmail.com>
>>> briancharles at hotmail.com> ha scritto:
>>>
>>> If I manually assign an IP address in the client and connect things are
>>> good. However, I have a lot of users and really need DHCP to work.
>>>
>>> Testing environment is:
>>>
>>> Client: Windows 7 b4 bit with Shrewsoft vpnclient ver. 2.1.7
>>>
>>> and connecting to
>>>
>>> Fortigate 100, Fortigate-100 3.00-b0568(MR5 Patch 3)
>>>
>>>
>>> If I use the DHCP over IPSEC option then:
>>>
>>> The error is No DHCP Response From Gateway
>>>
>>> I followed this link to get the configurations set up.
>>> <http://www.shrew.net/support/wiki/HowtoFortigate><http://www.shrew.net/support/wiki/HowtoFortigate>
>>> http://www.shrew.net/support/wiki/HowtoFortigate
>>>
>>> Thank you for your help!
>>>
>>> Brian
>>>
>>> _______________________________________________
>>> vpn-help mailing list
>>> <vpn-help at lists.shrew.net>vpn-help at lists.shrew.net
>>>  <http://lists.shrew.net/mailman/listinfo/vpn-help>
>>> http://lists.shrew.net/mailman/listinfo/vpn-help
>>>
>>>
>>> _______________________________________________
>>> vpn-help mailing list
>>>  <vpn-help at lists.shrew.net>vpn-help at lists.shrew.net
>>>  <http://lists.shrew.net/mailman/listinfo/vpn-help>
>>> http://lists.shrew.net/mailman/listinfo/vpn-help
>>>
>>>
>>
>





More information about the vpn-help mailing list