New Member

Solved

Route-overlap allow command fails

11 replies
5663 views

Hi

I'm trying to allow multiple IPSec dial-up connections from the same source IP, and I found help here: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Allowing-multiple-IPSec-dial-up-connection-from/ta-p/198550

My problem is, that I get an error, when I try to set the "route-overlap allow" command. It just says "unknown action 0"

I have a Fortigate 60F with firmware v7.4.3

Regards Thomas Barnes

ozkanaltasAnswer

Valued Contributor III

Hello @PCBarnes ,

It's interesting, I tried with your settings in my lab environment. The command does not work like yours.

Also, I have a dial-up tunnel configuration (FortiClient). In this type, the command is working.

Can you try it like that?

srajeswaran

Staff

Can you confirm if you have configured "set net-device enable" under phase1 ? If not, please try the below.
configure "set net-device enable" under phase1
change route-overlap to allow under phase2

disable net-device again under phase1

PCBarnesAuthor

New Member

Hello Suraj

Yes, I can confirm, that I did the "set net-device enable" first.

You can see, I'm a bit unsure about the "set" command. If I write exactly as suggested from the Fortinet homepage, I get another error.

Regards Thomas Barnes Route-overlap error.png

ozkanaltas

Valued Contributor III

Hello @PCBarnes ,

Your vpn type dial-up, right?

Because this command just running with dial-up tunnel type.

PCBarnesAuthor

New Member

Am I the only one using Fortinet VPN dial-up connection via IPSEC and L2TP, who has this problem described above? Is there really nothing you can do?

CatInHat

Explorer

When attempting to allow multiple IPSec dial-up connections from the same source IP address, you encountered an error when setting the "route-overlap allow" command. This command is probably not supported on your version of Fortigate firmware (v7.4.3). It is recommended that you contact Fortinet support for information about support for this command in your firmware version or possible alternatives to achieve your goal.

Sign up

Login with SSO

Login to the community

Login with SSO