Fotigate 5A und Watchgurad 1000 IPSEC

#1 Hallo alle IPSEC Expert und die es werden wollen

Ich habe eine keine oder auch Gröseres problem.

Ich möcht eine zwei Hardware Firewalls Wachtgurd 1000 mit Dynamischer IP
und eine Fortigate 50A mit Fester IP Adresse mit IPSce verbinden.
Doch ldeider bricht die verbindung bei der Phase2 mit der Fehlermedlung
10/02/06 11:05 iked[143]: Invalid DOI in notify message;
10/02/06 11:05 iked[143]: Error processing (not);
10/02/06 11:05 iked[143]: Unable to process info only exchange;

ab hat jemand von euch eine Idee?

Hier noch mal das ganze Potokoll von Inizator Watchgurad:

10/02/06 11:05 firewalld[123]: allow out eth1 60 icmp 20 128 172.20.18.222 128.109.20.2 8 0 (Ping)
10/02/06 11:05 iked[143]: Acquiring key for channel/policy 1/0
10/02/06 11:05 iked[143]: Key acquire proxyraddr = 128.109.0.0
10/02/06 11:05 iked[143]: Key acquire proxyladdr = 172.20.18.222
10/02/06 11:05 iked[143]: ipsec_acquire_keys: laddr = 82.26.19.224, raddr = 111.144.287.128
10/02/06 11:05 iked[143]: TO 111.144.287.128 AG-HDR ISA_SA ISA_KE ISA_NONCE ISA_ID ISA_VENDORID ISA_VENDORID ISA_VENDORID ISA_VENDORID
10/02/06 11:05 iked[143]: FROM 111.144.287.128 AG-HDR ISA_SA ISA_KE ISA_NONCE ISA_ID ISA_VENDORID ISA_VENDORID NAT-D NAT-D ISA_HASH
10/02/06 11:05 iked[143]: TO 111.144.287.128 AG-HDR* ISA_HASH NAT-D NAT-D
10/02/06 11:05 iked[143]: FROM 111.144.287.128 IF-HDR* -C63937BC ISA_HASH ISA_NOTIFY
10/02/06 11:05 iked[143]: Received RESPONDER_LIFETIME message, mess_id=0xBC3739C6
10/02/06 11:05 iked[143]: Phase 1 completed as initiator
10/02/06 11:05 iked[143]: Sending INITIAL_CONTACT message
10/02/06 11:05 iked[143]: TO 111.144.287.128 IF-HDR* -397DAA0E ISA_HASH ISA_NOTIFY
10/02/06 11:05 iked[143]: Ending phase1 as INITIATOR; attempting to start quick mode
10/02/06 11:05 iked[143]: Getting IPSEC preferences as Initiator propnum=1, mode=(Tunnel), laddr=82.26.19.224, raddr=111.144.287.128
10/02/06 11:05 iked[143]: Getting IPSEC preferences as Initiator propnum=2, mode=(Tunnel), laddr=82.26.19.224, raddr=111.144.287.128
10/02/06 11:05 iked[143]: TO 111.144.287.128 QM-HDR* -62EA18FF ISA_HASH ISA_SA ISA_NONCE ISA_KE ISA_ID ISA_ID
10/02/06 11:05 iked[143]: FROM 111.144.287.128 IF-HDR* -7F5075FF ISA_HASH ISA_NOTIFY
10/02/06 11:05 iked[143]: Invalid DOI in notify message
10/02/06 11:05 iked[143]: Error processing (not)
10/02/06 11:05 iked[143]: Unable to process info only exchange