Skip to main content
MarcusI
MarcusI
New Member
July 30, 2019
Question

Question about tunnel interface

  • July 30, 2019
  • 1 reply
  • 1813 views

Hi , First at all I want to say thanks for all support that always we can find here. The question is this: can I configure a tunnel in interface mode without a Policy Route? I remember have seen a guide where we have to configure 4 things : the tunnel, Policy Route, static route and policys IPv4...however a partner told me that Policy route is not necessary, I'm not sure abot this. I put this on the table because one time I configured the tunnel and it was UP without the Policy route but ther's no had anykind of traffic. My partner insisted that only with the static route it had must work...but until I put the Policy Route we have had traffic between our two localities. Correct me please if I'm wrong.

 

I'm using firmware 6.2.1 in differents models of fortigates.

Thanks in advance.

    1 reply

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    July 30, 2019

    Introduction of interface-mode or route-base IPSec is not to need sticky policy route and route more easily and dynamically if necessary starting with 5.0 or even before(?) long time ago.

    So, you need routes, instead of policy routes.

    Terms & ConditionsAccessibility statement
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!