Solved: ASA 55xx con Fortinet ????

rodrigo delgado garrido · ‎04-22-2014

estoy generando una vpn L2L con mi cisco ASA 5520 , y un Fortinet ,........es posible, se puede, help??????

Vishnu Sharma · ‎04-22-2014

Hi Rdelgado,

Yes we can have site to site VPN between ASA and Fortigate firewall. Please refer to this document:

http://docs-legacy.fortinet.com/cb/recipes/configuring-IPsec-VPN-with-a-FortiGate-and-a-Cisco-ASA.pdf

Vishnu

syed kazim abbas · ‎04-22-2014

HI,

Dear, its not face-book, plz write in full form and pure English only

Regards,

syed

rodrigo delgado garrido · ‎04-23-2014

skmkazim552:

IP=x.x.x.x,Error processing payload:Payload ID:1

syed kazim abbas · ‎04-23-2014

plz check here

https://supportforums.cisco.com/discussion/11234946/cisco-asa-vpn-error-processing-payload-payload-id-1

HTH

"please rate for helpful posts"

Vishnu Sharma · ‎04-22-2014

Hi Rdelgado,

Yes we can have site to site VPN between ASA and Fortigate firewall. Please refer to this document:

http://docs-legacy.fortinet.com/cb/recipes/configuring-IPsec-VPN-with-a-FortiGate-and-a-Cisco-ASA.pdf

Vishnu

rodrigo delgado garrido · ‎04-23-2014

vishnsha,

me arroja este mensaje en los log de mi ASA;

IP=x.x.x.x,Error processing payload:Payload ID:1

Vishnu Sharma · ‎04-23-2014

Podría por favor compartir la depuración completa. También me envía la salida de los comandos siguientes:

debug crypto isa 127 (if using 8.2 version) / debug crypto ikev1 127 (if using 8.4 and later version)
debug cry ipsec 127

Vishnu

rodrigo delgado garrido · ‎04-24-2014

Vishnu, en la salida de este comando;

debug crypto isa 127,

no veo llegando la IP del peer Fortinet, solo veo IPs de otros clientes.

en la salida de este comando, tampoco veo la IP:

debug crypto isa 200 , arroja lo mismo.