Skip to main content
moumoumatt
moumoumatt
New Member
March 24, 2015
Question

Unable to install policy

  • March 24, 2015
  • 2 replies
  • 19199 views

FMG-VM64 v5.2.1

 

I'm trying to push the policy to a Fortigate 500D Cluster, Fortigate 5.2.1.

 

When I attempt to install the policy, I get the following error messages;

 

Policy console event 90% state:5 dvm_err:0 Prepare commit fail: vip overlap, Copy Package 'Name'   Policy console event Failed to commit policies to devdb   Any ideas what could be causing this?

 

Thanks.

2 replies

moumoumatt
moumoumattAuthor
New Member
March 24, 2015

Problem solved - please ignore.

mnaccarato
mnaccarato
New Member
September 15, 2015

moumoumatt wrote:

Problem solved - please ignore.

Can you please provide information on how to solve this, I'm facing the same problem.

 

Thank you!

scao_FTNT
Staff
scao_FTNT
Staff
September 15, 2015

 

Can you please provide information on how to solve this, I'm facing the same problem.

 

Thank you!

if policy validation fail, pls provide copy log and task details, also debug output if possible (diag debug application securityconsole 255)

 

if policy install fail, pls provide device install log

 

and pls provide FMG version, ADOM version and FGT version

 

Thanks

 

Simon

sw2090
SuperUser
sw2090
SuperUser
December 6, 2017

It says "vip overlap". That looks like if you have an error in your portforward config (=vip). In this case obviously your port forwards overlap.

mounirDDBE
mounirDDBE
New Member
April 6, 2019

Hello,

I ran into the same issue.

when i tried to push a policy via Fortimanager i got the following error:

 

Post vdom failed:

error :-999 - vip overlap - vip-SMTP1, vip-SMTP2

 

config of VIPs:

edit "vip-SMTP1"

               set service "HTTP"

                set extip 177.123.09.09

                set extintf "port2.75"

                set mappedip "192.168.1.272"

                next

edit "vip-SMTP2"

               set service "HTTPS"

               set extip 177.123.09.09

               set extintf "port2.75"

               set mappedip "192.168.1.272"

                next

 

Has anyone run into the same problem?

chall_FTNT
Staff
chall_FTNT
Staff
April 8, 2019

What you are trying to configure is not support in FortiOS.   For 2 VIPs to share the same external IP, they must have unique ports that are being forwarded.

Terms & ConditionsAccessibility statement