Technical Tip: Dial-up IPsec interfaces are not mo...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 420387

Description

This article describes a scenario where the FortiGate GUI widget does not show bandwidth in the GUI.

Scope

FortiGate.

Solution

In the scenario of Dial-up IPsec the interface will never show bandwidth in the GUI widget, this is an expected behavior.

Example:

config vpn ipsec phase1-interface

edit "tunnel_name"

set type dynamic

In this scenario, from the FortiGate GUI: On the dashboard, add a widget, choose the interface bandwidth and choose dial-up VPN interface (whatever the name is).

Choose dial-up VPN interface name:

Upon selecting the dial-up VPN interface, no output will appear regarding the bandwidth:

Note: This limitation stems from how FortiOS handles an ephemeral, on-demand nature of dial-up tunnels: They are not persistently 'up' like the physical one, so GUI polling skips them to avoid misleading or incomplete data.

118

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: Dial-up IPsec interfaces are not monitored from GUI widget

You are leaving our website