HINT: FOS 5.2 IPSec Dialup-Tunnel Naming / Concurrent Users

Forum|Forum|11 years ago
March 20, 2015
5 replies
13595 views

Hello Forum,

just a little hint on naming Dialup-VPN Tunnels regarding the maximun concurrent Users.

Since established IPSec Dialup Tunnel Interfaces will be distinguished by adding a Sequence Number (eg. tunnel_0 , tunnel_1)

and a VPN Interface Name is limited to 15 characters, the maximum concurrent Users will be limited accordingly.

Just take look at the attached screenshots (max. Concurrent Users) and you may get the clue!

Regards,

Jan

tunnel.jpg

Best answer by ede_pfau

The name length limit is an inherent limit, valid for all versions of FortiOS. It is not configurable and thus, not in the config file.

Please have a look at this:

Technical Tip: IPSec VPN phase1 interface name characters limitation best practice

emnoc

New Member

I seen that also, but where in the cfg is the max concurrent user set? I believe this is a bug.

TheJaeeneAuthor

New Member

The Tunnel Name length is the Limit for the max concurrent Users!

emnoc

New Member

Okay so where is that included in the config file? That what's I talking about. I could never find exactly what/where this was populated in the configuration. If you make name length longer or shorter it indicates different concurrent values but this value is nowhere in the configuration from what I seen.

ede_pfauAnswer

SuperUser

The name length limit is an inherent limit, valid for all versions of FortiOS. It is not configurable and thus, not in the config file.

Please have a look at this:

Technical Tip: IPSec VPN phase1 interface name characters limitation best practice

emnoc

New Member

Okay thanks for the reference URL

I was looking for something in the cfg that set the actual limit,hence the confusion. Never seen that URL KB page before , kinda interesting. Here's an example of the different name lengths.

jpeg.jpg

Sign up

Login with SSO

Login to the community

Login with SSO