Posts tagged "IPSEC"

• Debug FortiGate IPSEC

  2026/09/10 — alex — FortiGate IPSEC

  IPSEC is a complicated protocoll, so debugging is often needed. To enable debugging on FortiGate firewalls you can use these commands: # reset any filter diagnose vpn ike log-filter clear # filter for a specific client on ip x.x.x.x diagnose vpn ike log-filter dst-addr4 x.x.x.x diagnose debug application ike -1 diag...

• MikroTik Automatic IPSec Failover

  2019/03/23 — alex — failover ipsec mikrotik CLI routing-2

  Problem: Mikrotik allows only one ipsec policy per network-to-network pair. If you want to have redundant tunnels between two locations with two upstreams you cannot configure ipsec redundancy on Mikrotik because one ipsec policy is always marked as "invalid" by the OS. Solution: I made a Mikrotik script that checks...