pjhtech ToolsFortiGate IKE Debug Shows No Output
Check VDOM, inherited filters, log-filter versus log filter syntax and whether a negotiation is actually starting.
Practical guideFortiGate Troubleshooting and Configuration Guides
Diagnose FortiGate VPNs, plan migrations, restrict local services and prepare changes with browser-local tools.
21 tools and references
No matching guides or tools
Try a shorter task name or clear the filters to see the full directory.
Troubleshooting / Common problems
FortiGate IPsec Up but a New Subnet Has No Traffic
Trace one new protected network through Child SA selectors, routing, policy, NAT and the destination host’s return path.
Practical guideFortiGate Conserve Mode During FortiGuard Updates
Apply Fortinet’s scoped IPS-update memory workaround on 2 GB models and identify the related fixed high-CPU defect.
Practical guideFortiGate Policy Routing Between VDOMs Fails RPF
Fix an inter-VDOM policy-routing RPF drop when a suitable kernel return route cannot be used, with an exception on the receiving VDOM link.
Practical guideFortiGate “no proposal chosen”: IKE, ESP and DH Checks
Troubleshoot FortiGate proposal errors by tunnel selection, IKE/ESP transforms, PRF, DH, PFS and the failed negotiation stage.
Practical guideFortiClient IKEv2 Migration: Enable EAP and Restore User Groups
Fix the PSK/local-user migration settings: enable EAP, restore policy groups and remove the conflicting tunnel-level group binding.
Practical guideFortiGate IPsec Tunnel Up but Traffic Stops Intermittently
Diagnose intermittent IPsec data loss using Child SA rekey, tunnel counters, routing and narrowly scoped hardware-offload issues.
Practical guideFortiGate Cannot Delete an Interface or Its Address Object
Remove an automatically created interface-subnet object or an obsolete packet-capture reference using the documented correction.
Practical guideFortiGate Hardware Offload Problems: NPU/ASIC Fixes and Workarounds
Traffic works until FortiGate offloads it? Find scoped NPU/ASIC fixes for IPsec, QinQ, NP6 failback and SoC5 shaping, with CLI commands and fixed releases.
Practical guideConfiguration & CLI guides
FortiGate Local-In Policy: Management Access and Rule Order
Troubleshoot FortiGate management access using interface services, trusted hosts and local-in rule order, with a scoped CLI example.
Practical guideFortiGate IPsec with Overlapping Subnets: NAT and Selectors
Map overlapping VPN networks to distinct translated prefixes and align FortiGate selectors, routes, IP pools, VIPs and reverse traffic.
Practical guideMigrations
FortiGate IKEv1 to IKEv2 Site-to-Site Migration
Convert an existing route-based FortiGate tunnel to IKEv2: phase 1 changes, peer IDs, Child SA selectors and common negotiation failures.
Practical guideFortiGate Config Migration: Interface Mapping and Import Errors
Troubleshoot cross-model FortiGate imports with config-error-log, interface dependency mapping and a comparison of the loaded configuration.
Practical guideTools & references
FortiGate SSL VPN Support Matrix by Model and FortiOS Version
Check which FortiGate models still support FortiClient SSL VPN, the last working FortiOS version, upgrade cutoffs, and where Agentless VPN remains.
Practical guideTCP MSS Calculator
Find the TCP MSS option value for an IP MTU, and the room left for TCP data when options are present.
Calculator / generatorIPsec / ESP Overhead Calculator
Find how many bytes IPsec adds to your packet and the resulting IP packet size.
Calculator / generatorFortiGate Bulk Address Object Generator
Generate FortiOS address objects from IPv4 lists or name,cidr CSV, preview the batch, and copy or download the CLI configuration.
Calculator / generatorFortiGate Address Group Generator
Create an IPv4 address group snippet from existing object names.
Calculator / generatorFortiGate Service Object Generator
Generate a TCP or UDP destination-port service object for FortiOS.
Calculator / generatorIKEv2 Proposal Checker
Check whether selected IKEv2 encryption and integrity choices fit together, and identify the setting to change.
Calculator / generatorCIDR List Comparison & Overlap Checker
Compare two IPv4 or IPv6 CIDR lists and get their exact intersection, differences, duplicates and containment relationships.
Calculator / generatorFortiGate commands by task
Need the inspection commands before making a change? Open the FortiGate CLI references for packet captures, sessions, routing, HA, SD-WAN and VPN authentication. Each reference explains the required context and what the result can establish.
Browse FortiGate command references