FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
hbac
Staff
Staff
Article Id 409898
Description

This article describes how to address an issue where it is not possible to change the Virtual Server Type because the option is greyed out. 

Scope FortiGate.
Solution

As shown below, the Type option is greyed out.

 

VS.PNG

 

The following error is shown when attempting to change the type in the CLI: 

 

config firewall vip

    edit Virtual_Server

        set server-type ssl

end

 

can not change server-load-balance vip's server-type! This object is being used.
object set operator error, -651 discard the setting
Command fail. Return code -651

 

The reason is because the Virtual Server has references. In this example, the Virtual Server is being used in a firewall policy #16.

 

ref policy.PNG

VIP 16.PNG

 

To find the reference in the CLI, run the following command: 

 

diagnose sys cmdb refcnt show firewall.vip.name Virtual_Server


entry used in table firewall.policy:policyid '16' entry dstaddr:name 'Virtual_Server' (From VDOM: 'root')

 

To change the Virtual Server Type, remove it from any references. 

 

After removing all the references, the button is not greyed out anymore and it will be possible to change Type. 

 

not greyed out.PNG