FortiManager
FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
smaruvala
Staff
Staff
Article Id 392881
Description This article explains about a known issue in which the Administrator sees an error while changing the values in VPN community configurations. The article also explains about the workaround for the issue.
Scope

FortiManager version 7.4.5 and above.

Solution

After the upgrade of the FortiManager to version 7.4.5 or above, the Administrator is not able to make any changes to the existing VPN community, as the FortiManager displays an error message 'vpnmgr/vpntable/<VPN community name>/ : cannot be edited'. Below is a sample screenshot of the same error.

 

Error_KB.png

 

This issue will be fixed in versions 7.4.7 and 7.6.3 of the FortiManager as part of issue ID 1090636.

 

The workaround for the issue is to configure the changes using the CLI script in the FortiManager.

 

First, the Administrator needs to find the configuration that needs to be executed in the script. To view the configuration, execute the command 'execute fmpolicy print-adom-object <Number of the ADOM name> <Number of category "vpnmgr vpntable"> <VPN community Name>' in the FortiManager CLI. Below is an example of the same. 

 

Config_KB.png

 

Administrators can use the output to make changes in the CLI Script. Go to Device Manager -> Scripts -> Create New -> Script. While running the script, select the option for 'Run Script on' as 'Policy Package or ADOM Database'. Below is an example in which the description of the VPN was changed to 'Testing123'. 

 

Script_KB.png

 

After the script configuration, select the option 'Run Script' to execute it by choosing the correct Policy Package.