Requirement of hub and spoke ipsec vpn in fortigate

Hi Umesh

Kindly see the below KB article:

https://docs.fortinet.com/document/fortigate/5.4.0/cookbook/962850/site-to-site-ipsec-vpn-with-two-fortigates

https://community.spiceworks.com/t/fortigate-ipsec-vpn-tunnel-for-multiple-networks/367335

Hello

If you are not familiar with IPsec then it is better to use the wizard.

https://docs.fortinet.com/document/fortigate/7.2.10/administration-guide/853412

You are going about this the completely wrong way. NAT the traffic on your spokes going to the hub. That way you can have all spoke tunnels up at the same time.

Although I guess you could create an SD-WAN zone for your IPsec interfaces and define that in your static routes, but again, this is the wrong way. Do it right and you will have a better result.