FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
jbindra
Staff
Staff
Article Id 331663
Description This article describes what to check if errors are received while integrating a WAN interface to a zone.
Scope FortiGate.
Solution

Integrating a WAN (Wide Area Network) interface into a zone can occasionally result in errors, preventing successful integration.

Below are key issues to check when encountering such errors:

 

Error vips.PNG

 

  1. Virtual IPs (VIPs) Configuration.

When integrating a WAN interface, ensure that no Virtual IPs (VIPs) are referencing the WAN interface. If VIPs are configured to use the WAN interface, errors may be encountered as shown in the screenshot.

To resolve this, check the list of configured VIPs to ensure none are associated with the WAN interface.

 

  1. SSL VPN Setup.

Errors may also arise if SSL VPN is configured to use the WAN interface. This can conflict with the WAN integration process.

To resolve this, remove the WAN interface from SSL VPN settings. Once the WAN interface is integrated to a Zone, put the Zone in the listening interface under SSL VPN settings.

 

Related document:

Interface migration wizard - FortiGate administration guide.

Contributors