IT Manager

Gordon Tin

<div>
<div class="content wysiwyg-content">
Background (Set up VPN)<br />
SSG5 to Fortigate Tunnel<br />
<br />
For SSG5 Netscreen<br />
Issue: <br />
It is noticed that <br />
Method1<br />
1. IKE - No bind to tunnel<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/09_w39/1388163/Policy-Tunnel-1.png" target="_blank" title="Policy-Tunnel-1.png (20 KB)"><img alt="Policy-Tunnel-1.png" class="file-block lazyload" style="max-width: 800px;" data-src="https://filedb.experts-exchange.com/incoming/2018/09_w39/800_1388163/Policy-Tunnel-1.png" /></a>2. When I create policy, I select tunnel VPN as IKE<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/09_w39/1388164/Policy-Tunnel-2.png" target="_blank" title="Policy-Tunnel-2.png (27 KB)"><img alt="Policy-Tunnel-2.png" class="file-block lazyload" style="max-width: 800px;" data-src="https://filedb.experts-exchange.com/incoming/2018/09_w39/800_1388164/Policy-Tunnel-2.png" /></a>(Result: The VPN established successful but it is unstable for this case.<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/09_w39/1388165/unstable-VPN.png-3.png" target="_blank" title="unstable-VPN.png-3.png (214 KB)"><img alt="unstable-VPN.png-3.png" class="file-block lazyload" style="max-width: 558px;" data-src="https://filedb.experts-exchange.com/incoming/2018/09_w39/1388165/unstable-VPN.png-3.png" /></a>I have other connection it works this way.<br />
<br />
Issue handled this way:<br />
Method2<br />
1. When I create IKE, I bind it to tunnel.<br />
<a href="https://filedb.experts-exchange.com/incoming/2018/09_w39/1388166/Bind-to-Tunnel.png" target="_blank" title="Bind-to-Tunnel.png (37 KB)"><img alt="Bind-to-Tunnel.png" class="file-block lazyload" style="max-width: 800px;" data-src="https://filedb.experts-exchange.com/incoming/2018/09_w39/800_1388166/Bind-to-Tunnel.png" /></a>2. Do select Action and VPN when I create Policy.<br />
(Result: The VPN is established and it is stable)<br />
<br />
My question is <br />
What is the technical different of establish VPN these 2 ways?
</div>
</div>


unstable-VPN.png-3.png

Bind-to-Tunnel.png

Policy-Tunnel-2.png

Policy-Tunnel-1.png

Background (Set up VPN)
SSG5 to Fortigate Tunnel

For SSG5 Netscreen
Issue: 
It is noticed that 
Method1
1. IKE - No bind to tunnel

2. When I create policy, I select tunnel VPN as IKE

(Result: The VPN established successful but it is unstable for this case.

I have other connection it works this way.

Issue handled this way:
Method2
1. When I create IKE, I bind it to tunnel.

2. Do select Action and VPN when I create Policy.
(Result: The VPN is established and it is stable)

My question is 
What is the technical different of establish VPN these 2 ways?

What cause the unstable VPN between SSG &amp; fortigate?

Juniper

Fortigate

Netscreen

A virtual private network (VPN) is a network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or travelling users access to a central organizational network securely. VPNs encapsulate data transfers using secure cryptographic methods and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.

What cause the unstable VPN between SSG &amp; fortigate?

What cause the unstable VPN between SSG & fortigate?