Skip to main content
hbac
Staff
Staff
September 10, 2025

Troubleshooting Tip: Virtual Server Type greyed out

  • September 10, 2025
  • 0 replies
  • 462 views
Description

This article describes how to address an issue where it is not possible to change the Virtual Server Type because the option is greyed out. 

Scope FortiGate.
Solution

As shown below, the Type option is greyed out.

 

VS.PNG

 

The following error is shown when attempting to change the type in the CLI: 

 

config firewall vip

    edit Virtual_Server

        set server-type ssl

end

 

can not change server-load-balance vip's server-type! This object is being used.
object set operator error, -651 discard the setting
Command fail. Return code -651

 

The reason is because the Virtual Server has references. In this example, the Virtual Server is being used in a firewall policy #16.

 

ref policy.PNG

VIP 16.PNG

 

To find the reference in the CLI, run the following command: 

 

diagnose sys cmdb refcnt show firewall.vip.name Virtual_Server


entry used in table firewall.policy:policyid '16' entry dstaddr:name 'Virtual_Server' (From VDOM: 'root')

 

To change the Virtual Server Type, remove it from any references. 

 

After removing all the references, the button is not greyed out anymore and it will be possible to change Type. 

 

not greyed out.PNG