Troubleshooting Tip: IPSec Template install does not show in Install Preview

Description

This article describes the IPSec Template changes on the interface IP, and the remote IP does not take changes under install preview. The changes are under Device Manager -> Provisioning Templates -> Ipsec Tunnel -> Select Template -> Select Tunnel -> Tunnel Interface Setup.

Scope

FortiManager, FortiGate.

Solution

Check on FortiGate for this configuration, what value or syntax it should contain.

Lotus-kvm35 # config system interface

Lotus-kvm35 (interface) # edit "HUB1-VPN1"

Lotus-kvm35 (HUB1-VPN1) # set ip
<class_ip&net_netmask> IP address and subnet mask (syntax = 1.1.1.1/24).

Lotus-kvm35 (HUB1-VPN1) # set remote-ip
<class_ip&net_netmask> IP address and subnet mask (syntax = 1.1.1.1/24).

Lotus-kvm35 (HUB1-VPN1) # set remote-ip

It should accept a syntax of an IP address with a subnet, and it needs to be followed by FortiManager.

If using metadata variables, it should follow the same syntax.