Why doesn't fortinet warning about duplicate virtual ips?

Forum|Forum|2 years ago
September 12, 2023
3 replies
2282 views

Hello everyone
I'm migrating policy from another FW company to Fortinet. In the Virtual IP section, I tried setting the same WAN IP, the same LAN IP, and the same port 80 without seeing any warnings. I would like to ask if there is any way to turn on the warning, because my old policy has quite a lot (>100) but there are duplicates but no warning when I go to troubleshoot, it's very tiring.

FortiGate

spoojary

Staff

That is because you have kept the external Ip as 0.0.0.0 which can be any IP. If you mention a specific Ip on the external IP section you will see a duplicate error. You will not see on this settings.

mle2802

Staff

Hi there,

This is because external IP is set to 0.0.0.0. As described in this article, only when external and internal IP is the same then the warning will be appeared. Please refer to this this document for more information "https://community.fortinet.com/t5/FortiGate/Technical-Tip-cannot-create-VIP-or-Address-Object-entry-error-a/ta-p/197165"

Best regards,
Minh