Point-to-Point IPSec VPN between Fortigate 100 and Netopia 3347W

The remote location will be on 10.100.1.0 and the home office will be 10.1.1.0

This could be any number of issues..........can you provide the "running configs" for both.  Also are you using the correct ports for IPSec on both?

Netopia Config. IPsec area
set security firewall option ClearSailing
set security ipsec option on
set security ipsec tunnels name "GTN2NYC" tun-enable on
set security ipsec tunnels name "GTN2NYC" dest-ext-address 64.50.133.66
set security ipsec tunnels name "GTN2NYC" dest-int-network 10.100.1.0
set security ipsec tunnels name "GTN2NYC" dest-int-netmask 255.255.255.0
set security ipsec tunnels name "GTN2NYC" encrypt-protocol ESP
set security ipsec tunnels name "GTN2NYC" auth-protocol ESP
set security ipsec tunnels name "GTN2NYC" IKE-mode pre-shared-key-type ascii
set security ipsec tunnels name "GTN2NYC" IKE-mode pre-shared-key "4(nME!725JF6e2Ry"
set security ipsec tunnels name "GTN2NYC" IKE-mode neg-method main
set security ipsec tunnels name "GTN2NYC" IKE-mode DH-group 5
set security ipsec tunnels name "GTN2NYC" IKE-mode isakmp-SA-encrypt 3DES
set security ipsec tunnels name "GTN2NYC" IKE-mode isakmp-SA-hash SHA1
set security ipsec tunnels name "GTN2NYC" IKE-mode PFS-enable on
set security ipsec tunnels name "GTN2NYC" IKE-mode ipsec-soft-mbytes 4210
set security ipsec tunnels name "GTN2NYC" IKE-mode ipsec-soft-seconds 1600
set security ipsec tunnels name "GTN2NYC" IKE-mode ipsec-hard-mbytes 5120
set security ipsec tunnels name "GTN2NYC" IKE-mode ipsec-hard-seconds 1800
set security state-insp udp-timeout 180
set security state-insp tcp-timeout 14400
set security state-insp ip-ppp vcc1 option off

Fortigate Config-
config vpn ipsec phase1
    edit "VPNtunnel"
        set type dynamic
        set dpd enable
        set nattraversal enable
        set proposal 3des-sha1 3des-md5
        set psksecret ENC uKQiSKrRIBKEO/oyhslLxE+qZnF2WiMMlGxc02HDguxswASZC6ek+kKX2cwdFXlEx5btR5oz1UXhDEndBcnmFHDT8mew81zND5O6DAGy9OcHUMlt
    next
    edit "GTN2MIAMI"
        set dpd enable
        set nattraversal enable
        set proposal 3des-sha1 3des-md5
        set remotegw 70.148.141.142
        set psksecret ENC gHPyQ70bK0rGXTozJlFxTx8xrq/QyDqSBteqxujqw+fcOx6MjZrFatmIzwJB5E9D9jq5OyxHDcvau5Msp7BIFd5vcKEsN9eYABOCmZxOkuQdRGzG
    next
end
config vpn ipsec phase2
    edit "VPNagent"
        set internetbrowsing "internal"
        set pfs enable
        set phase1name "VPNtunnel"
        set proposal 3des-sha1 3des-md5
        set replay enable
        set selector wildcard
        set dhcp-ipsec enable
    next
    edit "GTN2MIAMI"
        set internetbrowsing "internal"
        set pfs enable
        set phase1name "GTN2MIAMI"
        set proposal 3des-sha1 3des-md5
        set replay enable
        set selector wildcard
    next
end

The desitnation on the Fortigate unit is defined in the firewall policy, not in the IPsec area.  

   edit 25
        set srcintf "internal"
        set dstintf "external"
        set srcaddr "VPNinternal"
        set dstaddr "VPNexternal"
        set action encrypt
        set schedule "always"
        set service "ANY"
        set inbound enable
        set outbound enable
        set vpntunnel "GTN2MIAMI"

VPNinternal= 10.1.1.0 | VPNexternal=10.100.1.0

I figured it out.  I had the wrong destination address on the Netopia router!  Fixed it and the tunnel is up!

So was mostly right then, it was to do with that address.

KD