Skip to main content
Oleggr
New Member
July 22, 2019
Question

VXLAN over IPSEC - can't add member to the switch-interface

  • July 22, 2019
  • 0 replies
  • 1452 views

is it working configuration for VM https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/821119/vxlan-over-ipsec-tunnel ?

I have tried it on a pair of FGT_VM64-v6-build0866-FORTINET. Everything is OK except the last step 4 with "set member" command.

It is impossible to add a port to the switch if it mentioned previously somewhere in configuration.

Moreover according to the Cookbook 

"The ports that you include must not have any link or relation to any other aspect of the FortiGate unit, such as

DHCP servers, security policies, and so on."

It is impossible not in CLI not in GUI.

 

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.