Skip to main content
kadey
New Member
February 1, 2019
Question

Netflow source-ip using VIP...

  • February 1, 2019
  • 0 replies
  • 1612 views

We're trying to export netflow from a Fortigate device to a collector behind a remote Fortigate using an IPSec VPN tunnel. To accomplish this in an environment where there could be overlapping subnets, we're using VIPs on the VPN interfaces. We can ping the remote collector by setting the ping source to a local VIP address. However when we try to configure the netflow's source-ip to a local VIP, it results in a "...not valid source ip." message.

 

Thanks in advance for any ideas.

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!