Troubleshooting Tip: Tunnel interface is not visible in GUI and cannot be selected in a firewall policy or in static routes

Description

This article describes how to resolve an issue where the tunnel interface is not visible in the GUI and cannot be selected in a firewall policy or static routes.

Scope

FortiGate v7.2.5.

Solution

This issue is purely cosmetic. It triggers only in an HA environment. The last configured IPsec tunnel is not visible in the route or policy selection.

Note: In cases of IPsec aggregation, the IPsec tunnel is not expected to appear under the WAN interface, firewall policies, and static routes.

Here, a tunnel named 'Broadband' created under port5 was not visible under the interface.

The tunnel named 'Broadband' created under port5:
 

In the screenshot above, the tunnel named 'Broadband' created under port5 was not visible under Network -> Interface.

The workaround is to create a 'dummy' IPsec tunnel so that the previous tunnel will be visible in the GUI. A permanent fix for the issue is available in FortiOS v7.2.6 and FortiOS v7.4.1.