Skip to main content
Mohammed_Omar
New Member
May 22, 2025
Solved

Ipsec tunnel listening interface equals an SD-WAN interface

  • May 22, 2025
  • 4 replies
  • 913 views

Hello,

 

in fortigate 7.6.3 (latest), can you choose an SD-WAN interface (or multiple interfaces) listening interface in a IPSEC tunnel ? I can't yet upgrade mine. Thank you

 

here is where :

 

Capture IPSEC.jpgas

Best answer by Yurisk

I am also surprised, and no FortiOS 7.6.3 admin guide mentions that. Anyway, trying on FGT 7.6.3 CLI for config vpn ipsec phase1-int to set source-interface does not accept SD-WAN name. 

4 replies

AEK
SuperUser
SuperUser
May 22, 2025

Hi Mohammed

Can you share the document stating that you can do so?

AEK
Yurisk
SuperUser
YuriskAnswer
SuperUser
May 22, 2025

I am also surprised, and no FortiOS 7.6.3 admin guide mentions that. Anyway, trying on FGT 7.6.3 CLI for config vpn ipsec phase1-int to set source-interface does not accept SD-WAN name. 

yurisk.info - all things Fortinet blog, no ads
Mohammed_Omar
New Member
May 22, 2025

Actually I was asking you the question.

The image is just to show "where".

I chose Yurisk's answer as best answer since he tested and said that we can't.

Yurisk
SuperUser
SuperUser
May 22, 2025

Ah, sorry, misunderstood you. 

yurisk.info - all things Fortinet blog, no ads
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!