u/sparcmo

IKEv2 Client VPN with FAC and AD Authenticating but client timed out

Hi All

Hope anyone here is able to assist as logging issues with forti is more frustrating than dealing with this issue.

Layout.
Client VPN (EMS and free)
Firewall to FAC to AD

I created a new IPSec with IKEv2, I tested and got it all working then after a bit I had to VPN in again and it didn't work.
I logged on to the AD and checked the account password was not expired and the account was not locked out.
Tried VPN again and it times out.
I then reset the AD account password to the same as it was and the VPN worked.

The next day the same thing happened.
I checked the FAC and the Firewall logs and all logs show that the authentication was successful but the FortiClient timed out.

Timeout it set to 60.

This is happening on the free client and EMS. And I cant find any logs showing anything real in terms of there being an issue.

Anyone ever experience anything similar?

Im happy to share redacted configs if anyone needs.

reddit.com
u/sparcmo — 3 days ago

Hi All.

Please share your most common day to day functions on linux servers as a linux admin.
IE, managing user or permissions. managing njinx and so on.
If you are willing please share what you are doing.
Lets day allowing ports to the web server running on X web server on X linux distro.

Im trying to compile most used linux management functions and most used linux apps in business environments. Google keeps giving me stuff like ls and ip addr and so on but I need something that is a bit more relevant to an actual linux sys admin's day to day.

The more info the better.
Also Im a long time Windows server engineer / network engineer and I can google my way around linux but I have never worked on linux in a business environment so hoping the real OGs can share some info here.

Thanks all.

reddit.com
u/sparcmo — 4 months ago