Phase2 values Fortigate 300E

Hi @roni_lucas ,

Your inquiry best fits this guide below which talks about the effect of increasing the number of characters in your VPN name :
- https://community.fortinet.com/t5/Blogs/IPSec-Remote-Access-VPN-Naming-Limitations-on-FortiGate/ba-p/238461

Other reference : https://community.fortinet.com/t5/FortiGate/Technical-Tip-IPsec-VPN-phase1-interface-name-characters/ta-p/193193

Client-to-Gateway is a performance-based number. (you can have a single phase1+phase2 config for a dialup hub = FGT, and up to that many remote clients)

Compare this with Gateway-to-Gateway config, where the number is derived from policy-based tunnels (= the tablesize limit of "config vpn ipsec phase1").

The limit to configured phase2-interface selectors should be 512 per single phase1.

Hello @roni_lucas 

You can always look into max value table for a particular model. Please follow the link below:

https://docs.fortinet.com/max-value-table

Regards,

Verender

Try "print tablesize" in the FortiGate CLI.