#VPN Site-To-Site. Issue When Create Multiple Tunnels

Forum|Forum|3 years ago
March 17, 2023
5 replies
3263 views

I have 3 Site A B C using FortiGate-VM (7.0 & 7.2). Three Site using 3 Ip Public for VPN gateway.

IPsec Tunnel between A <-> B is Up and running.

And I create another Tunnel A <-> C, But the Wizard show "Unable to setup VPN. The rollback process has encountered an error. Orphaned objects may still exist in the configuration database".

Screenshot 2023-03-17 130529.png

FortiGate

Best answer by Donglv_

Thanks. I found the problem. Bescause The Firewall policies have reach the maximum entries then the VPN tunnel cannot create more VPN policies.

funkylicious

SuperUser

Have you tried converting into a custom tunnel and setting it up that way ?

"jack of all trades, master of none"

Donglv_Author

Explorer

Yes I already setting in custom tunnel same as the first tunnel

Donglv_AuthorAnswer

Explorer

Thanks. I found the problem. Bescause The Firewall policies have reach the maximum entries then the VPN tunnel cannot create more VPN policies.

funkylicious

SuperUser

You can workaround that with enabling multiple interface policies from feature visibility to help with your lab.

"jack of all trades, master of none"

Sign up

Login with SSO

Login to the community

Login with SSO