Unable to create a HUB template using IPS...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 351708

Description

This article describes an issue where the HUB option is greyed out when creating an ADVPN setup using IPSec Wizard.

Scope

FortiOS.

Solution

This is due to a Spoke configuration that is still present on the IPSec VPN configuration of the FortiGate.

To be able to select the HUB template, auto-discovery-receiver must be disabled.

config vpn ipsec phase1-interface

edit <VPN_Name>

set auto-discovery-receiver disable

end

Or:

Delete the whole IPSec VPN phase1-interface configuration.

Note: All the references of the IPSec Phase1-interface must be deleted first for us to be able to delete the whole IPSec Phase1-interface tunnel including the Firewall policies and Phase2-interface.

After doing one of the steps above, the HUB template can be selected again on the IPSec Wizard.

130

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: Unable to create a HUB template using IPSec Wizard

You are leaving our website