- IPsec tunnel is created by the Wizard.
- When trying to add it into IPsec Aggregate, it needs to set 'aggregate-member' in phase1 settings.
- It will pop out an error message when trying to set 'aggregate-member enable' in phase1 settings.
config vpn ipsec phase1-interface (phase1-interface) # edit a (a) # set aggregate-member enable (a) # end Please enable phase2 auto-negotiate if ipsec-aggregate uses redundant algorithm. This interface is currently in use. object set operator error, -23, roll back the setting Command fail. Return code -23 - Remove the config related to phase1 including firewall policies and static route.
- It is possible to add a tunnel interface to the IPsec aggregate now.
 |