FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
navellano
Staff
Staff
Article Id 371083
Description This article describes how to mitigate error 'You cannot have duplicated routes on SD-WAN and non SD-WAN interfaces'.
Scope FortiGate.
Solution

The error occurred only when there were existing static routes for non-SD-WAN interfaces. 

To mitigate the issue, it is recommended to establish a console connection on the FortiGate device first, as it needs to delete/remove all the existing static routes associated with the SD-WAN interfaces. To keep the FortiGate connection active, a console connection is required. 

 

This is the actual error: 

 

In GUI:

 

11.jpg

 

In the command line: 

 

12.jpg

 

Delete all of the existing static routes linked with the SD-WAN interfaces: 

 

13.jpg

After being removed, routes on the SD-WAN zone can now be added: 

 

In GUI:

 

14.jpg

 

In CLI:

 

15.jpg

 

Command 'get router info routing-table all' can be executed to verify if the routes have been added to the routing table. 

Related Articles: