FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
HarshChavda
Staff
Staff
Article Id 371833
Description

This article describes how to troubleshoot the error 'An error occurred when attempting to change this reference (system.xx), this reference must be handled manually.' while trying to add an interface to the SD-WAN zone with the Integrate Interface option.

Scope FortiGate v7.0+.
Solution
  1. Error:

'An error occurred when attempting to change this reference (system.zone), this reference must be handled manually

As shown in the following picture, the error occurs when attempting to move an interface to SD-WAN with the Integrate interface option:

 

SSDWAN kb1.PNG

 

This error occurs when that interface is referenced in any zone on FortiGate:

 

SDWAN kb2.PNG

 

To resolve this error message, the interface should be removed from the referenced zone and then try to integrate the interface again. It will be added successfully without any error:

 

SDWAN kb3.PNG

 

It can also be solved by selecting 'Remove Member' for references for the System Zone option while trying to add an interface to the SD-WAN Zone with the Integrate Interface option:

 

SDWAN kb4.PNG

 

Once the zone reference is removed using the 'Remove Member' option, it will add the interface to the SD-WAN zone as shown below:

 

SDWAN kb5.PNG

 

  1. Error:

'An error occurred when attempting to change this reference (system.ha), this reference must be handled manually'

 As shown in the following picture, the error occurs when attempting to move an interface to SD-WAN with the Integrate interface option:

 

error.png

This error occurs when that interface is referenced in the HA setting:

 

ref.png

 

To resolve this issue,  remove the interface from the HA monitored interface setting. Navigate to FortiGate GUI -> System -> HA -> Edit.

 

ha.png

 

Once the interface is removed, add the interface to the SD-WAN zone using the Integrate interface option successfully.

 

success.png

 

Related article:

Technical Tip: How to add the interface in SD-WAN member without deleting references '