Skip to main content
DPadula
Staff & Editor
Staff & Editor
September 15, 2025

Troubleshooting Tip: Changing firewall VIP on FortiSRA

  • September 15, 2025
  • 0 replies
  • 209 views
Description This article describes how to change the IP address on the VIP.
Scope FortiSRA.
Solution

While changing the IP address VIP on FortiSRA, the message 'extip can not be set manually when intf-ip-sync is enable' will be shown.

 

error message.jpg

 

As shown in the picture above, there is no 'intf-ip-sync' command; the reason is that the enable option is the default action. FortiOS will not show default commands on the CLI unless 'show full-configuration' is used.

 

  1. Set the command  'intf-ip-sync' to disable first using the 'set intf-ip-sync disable' command.
  2. Change the IP accordingly to the environment setup with 'set extip x.x.x.x'. In this example, the IP address 10.56.2.185 is being used.
  3. Use 'end' to save the settings.

 

settings changed.jpg

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.