| Description | This article describes the reason why IPSec site-to-site VPN next hop shows a random 10.0.0.0/8 range when using the same remote gateway IP address. |
| Scope |
FortiOS 7.0.1 |
| Solution |
When two IPSec VPN tunnels have the same remote gateway IP, the next-hop IP is shown with a random IP from the 10.0.0.0/8 range.
In this example, route 10.193.0.0/20 is reachable over Tunnel_01 and Tunnel_02 with the same remote gateway.
From the routing table, both tunnels were Tunnel_01 with 10.47.19.80 and Tunnel_02 with 10.0.0.3.
These IPs are actually the tunnel ID for each VPN and it is expected.
Related document: |
