https://networkingmaduri.blogspot.com/
click below link for configuration
https://networkingmaduri.blogspot.com...
show vpn ipsec phase1-interface
diagnose vpn ike gateway --- to check phase1 status
diagnose vpn tunnel list --- to check phase2 status
diagnose debug application ike 1 -- diagnose command
get vpn ipsec tunnel summary
execute traceroute-options source
execute traceroute
diagnose sniffer packet any 'host 172.16.202.1 and port 4500' 4 0 l
diagnose vpn ike log-filter dst-addr4 172.16.202.1
diagnose debug application ike -1
diagnose debug enable
#Ipsecvpncli#sitetositevpncli#ipseccli#fortigatefirewallipsecvpn#cli#vpncliipsecfortigatefirewall