IPSEC tunnel is up but no traffic from one end

[kishan]

One side is Meraki MX68W and other side is FortiGate. 

Configured IKE V2 and phase 1&2 both up, tunnel is up. Traffic can be send from fortigate but it received nothing.

Checked  Private subnets and all configurations, but no luck 

from Meraki I can able to ping Fortigate's public ip but not lcoal private subnet.
From Fortigate he can able to ping my private subnet but not receiving back.

anyone able to help or suggest?

[Inderdeep]

@kishan : Can you check the below thread if it helps 

https://community.meraki.com/t5/Security-SD-WAN/Fortigate-to-Meraki-IPsec-traffic-only-going-one-way...

[kishan]

Traffic can be sent from Fortigat e to MX but on MX  i can not see anything and on Fortigate nothing received from MX.

From both end only able to ping PUB IP not LAN subnets, however Tunnel is up 

@Inderdeep 

[Bruce]

@kishan there’s not much you can do on the Meraki end if the tunnel is up - there is the Site-to-site Outbound VPN firewall, but by default this allows all. Maybe post relevant parts of your FortiGate configuration and community members might be able to spot something.

[PhilipDAth]

I don't know the answer.  I recall people talking about disabling NAT-T on the Fortigate side before.