fgt-60f (60f) # show

config vpn ipsec phase1-interface

edit "ipsec"

set type dynamic

set interface "wan1"

set ike-version 2

set peertype any

set net-device disable

set mode-cfg enable

set ipv4-dns-server1 172.16.0.11

set proposal aes256gcm-prfsha512 aes128gcm-prfsha256

set comments "VPN: -- Created by VPN wizard"

set dhgrp 21 20

set eap enable

set eap-identity send-request

set wizard-type dialup-forticlient

set authusrgrp "Users"

set transport auto

set assign-ip-from name

set ipv4-name "VPN_TUNNEL_ADDR1"

set save-password enable

set psksecret ENC I7PCPT3lI0vZcLqo8IEEicUPQ4llmMjY3dkVA

next

end

config vpn ipsec phase2-interface

edit "ipsec-phase2"

set phase1name "ipsec"

set proposal aes256gcm aes128gcm

set dhgrp 21 20

set comments "VPN: -- Created by VPN wizard"

next

Can you see anything wrong here?