FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
vinodhini
Staff
Staff
Article Id 422302
Description This article explains how to avoid an error, 'object set operator error, -54', while configuring mtu-override in the IPsec interface.
Scope FortiGate v7.4.
Solution

When configuring the mtu-override option in the IPsec VPN interface, it shows the following error:

 

FGT #config system interface

FGT (interface) # edit vpn-ipsec

FGT (vpn-ipsec) # set mtu-override enable
FGT (vpn-ipsec) # set mtu 1340
FGT (vpn-ipsec) # next
object set operator error, -54 discard the setting
Command fail. Return code 1
FGT (interface) #

 

This error appears when the VPN interface has IP and remote-ip configured.

 

Removing the IP and remote-ip in the vpn interface configuration would resolve the issue.

 

config system interface
    edit vpn-ipsec
        unset ip
        unset remote-ip
        set mtu-override enable
        set mtu 1340
    next
end