I have a FRITZ!Box router, which I configured to accept IPSec connections from the outside:
On my remote computer, I am able to do
$ ping <my-fritz-domain>.myfritz.net
PING <my-fritz-domain>.myfritz.net (<my-public-ip>) 56(84) bytes of data.
64 bytes from i59F509D8.versanet.de (<my-public-ip>): icmp_seq=1 ttl=57 time=12.6 ms
64 bytes from i59F509D8.versanet.de (<my-public-ip>): icmp_seq=2 ttl=57 time=13.4 ms
...
$ telnet <my-fritz-domain>.myfritz.net 45757
Trying <my-public-ip>...
Connected to <my-fritz-domain>.myfritz.net.
Escape character is '^]'.
...
However, when we try to connect with forticlient with the configuration
and using the username and password of our FRITZ!Box user, the connection attempt is aborted after ~30 seconds and we get the error log entry
5/5/2024 1:05:41 PM info ipsecvpn date=2024-05-05 time=13:05:40 logver=1 id=96566 type=securityevent subtype=ipsecvpn eventtype=status level=info uid=3E944830A1864241B8529595703D4918 devid=FCT8000731423034 hostname=mop pcdomain=N/A deviceip=172.22.128.1 devicemac=00-15-5d-89-1d-14 site=N/A fctver=7.2.2.0864 fgtserial=FCT8000731423034 emsserial=N/A os="Microsoft Windows 11 Professional Edition, 64-bit (build 22631)" user=<pc-username> msg="loc_ip=192.168.2.49 loc_port=500 rem_ip=<my-public-ip> rem_port=500 out_if=0 vpn_tunnel=<fritz-username> action=negotiate init=local mode=aggressive stage=1 dir=outbound status=success Initiator: sent <my-public-ip> aggressive mode message #1 (OK)" vpntunnel=<fritz-username>
5/5/2024 1:05:53 PM warning ipsecvpn date=2024-05-05 time=13:05:52 logver=1 id=96561 type=securityevent subtype=ipsecvpn eventtype=error level=warning uid=3E944830A1864241B8529595703D4918 devid=FCT8000731423034 hostname=mop pcdomain=N/A deviceip=172.22.128.1 devicemac=00-15-5d-89-1d-14 site=N/A fctver=7.2.2.0864 fgtserial=FCT8000731423034 emsserial=N/A os="Microsoft Windows 11 Professional Edition, 64-bit (build 22631)" user=<pc-username> msg="No response from the peer, phase1 retransmit reaches maximum count" vpntunnel=<fritz-username> locip=192.168.2.49 locport=500 remip=<my-public-ip> remport=500
How can we properly connect to our home network from outside? Is this method with forticlient recommended?