I know this is SOT; but have you considered using a different tunnel tech or are you completely married to IPSEC?

I have similar experiences in the past - i've found that for a large chunk of use cases switching to OpenVPN on an commodity box sitting at the edge is far more simple and reliable (and has a number of performance gains).

On 29 August 2013 13:02, Mark Goldfinch <mark.goldfinch@modicagroup.com> wrote:

On 29 August 2013 12:43, Jonathan Brewer <jon.brewer@gmail.com> wrote:

I've consistently failed to get a Mikrotik client to talk to Fortinet gateway. Can I have a cookie?

We've had the opposite experience, RouterOS client and Fortinet without a problem. ��You sure can have a cookie, may need to be beer flavoured to pass list regs though! :-)

Thanks,
--

Mark Goldfinch |��Systems Team Leader

MODICA GROUP

nz:��+64 4 498 6000

_______________________________________________
NZNOG mailing list
NZNOG@list.waikato.ac.nz
http://list.waikato.ac.nz/mailman/listinfo/nznog