Skip to main content
sam76
New Member
February 23, 2025
Question

Fabric overlay orchestrator not provide the good wan1 remote IP

  • February 23, 2025
  • 3 replies
  • 863 views

Hi, 

 

I have configure 3 60F like that: 

- 1hub

- 2 Spoke

 

In the Hub, the WAN 1 ip of the Remote-GW is: "set remote-gw 10.1.230.100"

And in the spoke, IPSEC 1 show 10.1.230.100. But it's the lan IP.

 

How to change with the wan ip ?

 

Exemple: config overlays
edit "wan1"
set overlay-tunnel-block 10.10.10.1 255.255.255.0
set remote-gw 10.1.230.100
set interface "wan1"
set bgp-neighbor "10.10.10.253"
set ipsec-phase1 "fabric_vpn_1"
set sdwan-member 1
next

3 replies

Anthony_E
Staff
Staff
February 26, 2025

Hello Sam,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Best Regards
Anthony_E
Staff
Staff
February 28, 2025

Hello Sam,

 

We are still looking for someone to help you.

We will come back to you ASAP.


Regards,

Best Regards
Anthony_E
Staff
Staff
March 6, 2025

Hello Sam,

 

If the Fabric Overlay Orchestrator is not providing the correct WAN1 remote IP:

  1. Verify Configuration: Ensure that the IP address configuration for WAN1 is correctly set on both the hub and spoke devices.  Check the IPsec and BGP settings to ensure they are correctly configured for the SD-WAN overlay.
  2. Check Connectivity: Confirm that there is network connectivity between the hub and spoke devices on the WAN1 interface.  Use diagnostic tools like ping or traceroute to verify connectivity.
  3. Review Logs: Check the system logs on the FortiGate devices for any error messages or warnings related to the WAN1 interface or SD-WAN configuration.
  4. Update Firmware: Ensure that all FortiGate devices are running the latest firmware version to avoid any known bugs or issues.
  5. Reconfigure Overlay:  If the issue persists, consider reconfiguring the SD-WAN overlay using the Fabric Overlay Orchestrator to ensure all settings are correctly applied.
Best Regards
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!