Technical Tip: How to add IPsec tunnel created by wizard into IPsec Aggregate.

[tonylin1]

Description	This article describes how to add an IPsec tunnel created by Wizard into IPsec Aggregate.
Scope	FortiGate v7.2.
Solution	IPsec tunnel is created by the Wizard. When trying to add it into IPsec Aggregate, it needs to set 'aggregate-member' in phase1 settings. It will pop out an error message when trying to set 'aggregate-member enable' in phase1 settings. config vpn ipsec phase1-interface (phase1-interface) # edit a (a) # set aggregate-member enable (a) # end Please enable phase2 auto-negotiate if ipsec-aggregate uses redundant algorithm. This interface is currently in use. object set operator error, -23, roll back the setting Command fail. Return code -23 Remove the config related to phase1 including firewall policies and static route.   It is possible to add a tunnel interface to the IPsec aggregate now.