Skip to main content
TwoSoulz
New Member
November 19, 2025
Solved

Hub and Spoke (ADVPN+mode-cfg) not working after upgrading to 7.4.9

  • November 19, 2025
  • 2 replies
  • 869 views

Hello,

 

used products: FortiGate 80F/FortiGate 400F

 

I have a simple Hub and Spoke Szenario, which works perfectly in 7.4.8 and less. If I upgrade my spoke to 7.4.9 I can't establish my VPN any more. 


Spoke says: 

ike V=root:0:vpn-pfi-hub: connection expiring due to mode-cfg client IPv4 error ike V=root:0:vpn-pfi-hub: going to be deleted ike V=root:0:vpn-pfi-hub: schedule auto-negotiate

Hub says:
twin connection 

Spoke config: mode-cfg, but with manual assigned ip on the interface
Hub config: mode-cfg, no ip assignment

There must have been a change in 7.4.9 - but I can't find it. If I downgrade, everything works.

Kind regards
TwoSoulz


Best answer by TwoSoulz

I found the solution:

 

deactivate on the spoke the "assign-ip" via cli. In the versions before, it didn't matter. Since 7.4.9 it does. 

2 replies

TwoSoulz
TwoSoulzAuthorAnswer
New Member
November 19, 2025

I found the solution:

 

deactivate on the spoke the "assign-ip" via cli. In the versions before, it didn't matter. Since 7.4.9 it does. 

rmharini
Staff
Staff
May 14, 2026

Hello TwoSoulz, 

Please find the below document for more information:

 

Regards, 

Harini

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!