Technical Tip: How to fix the error 'One or more members are associated with an interface, only addresses that are not associated with an interface can be added'
| Description | This article describes how to fix the error 'One or more members are associated with an interface, only addresses that are not associated with an interface can be added'. The error is received when address objects are added to an address group that has a different associated interface. |
| Scope | FortiGate v7.4.x, v7.6.2. |
| Solution | The error appears while trying to add address objects which has two different associated interfaces.
The following are the address objects created:
To solve this issue, the associated interface should be removed from the address object (any), or it should be the same associated interface.
Note: After upgrading from FortiOS version 7.2.x or earlier to FortiOS v7.4.x or later, existing address objects may be automatically removed from local-in and firewall policies if their associated interfaces are not set to 'any'. To ensure the continued usability of these address objects across different interface policies, make sure their interface setting is configured as 'any' or associated with the same interface before or after the upgrade.
Note2: Some address objects are created automatically from an interface subnet. These objects are permanently tied to that interface and the GUI does not allow changing their interface later (settings appear grayed out). If an address group includes Interface Subnet objects from different interfaces, FortiGate blocks it and shows the “All addresses must have the same or no associated interface” error.
Related article: |
