Help
FortiManager
FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
farhanahmed
Staff
Staff

Created on ‎05-14-2024 10:15 PM

Article Id 315035

Troubleshoot Tip: VPN configured via VPN Manager fails to install with error 131 datasrc invalid an interface IP is 0

Description This article explains how to troubleshoot FortiManager when install validation fails with 'error: 131 datasrc' invalid an interface IP is 0 for VPN configured via VPN Manager.
Scope FortiManager, VPN Manager.
Solution

After configuring the VPN in VPN-Manager install validation fails with the error:

 

1.png

 

The reason for failure is that to newly added peer FortiGate to VPN Manager has a dynamic IP address ( i.e. mode is set to DHCP) on the interface used as VPN Interface.

 

2.png

 

This can be resolved in two ways:

  1. Set public_ip in the VPN-Manager.
  2. Use Dynamic DNS on FortiGate Interface (recommended).

 

  1. Set public_ip in the VPN-Manager:
  • Go under VPN-Manager -> IPSec VPN Communities, 'Right-Click' on VPN Community, Select Configure Gateways, Select the FortiGate with dynamic IP address and Select Edit:

 

3.png

 

  • Expand 'Advanced Options' and set the 'public_ip' which is the DHCP reserved IP address of the FortiGate interface used for VPN:

 

4.png

 

  • Interface IP address can be obtained from FortiManager -> Device Manager -> Device & Groups, Select the FortiGate -> Network -> Interfaces OR from the FortiGate -> Network -> Interfaces.
  • Use the Install Wizard to push the config to FortiGate.
  • Install config now does not give the error and the remote-gw IP is present:

 

5.png

 

  1. Use Dynamic DNS on FortiGate Interface:
  • This can also be set in FortiManager -> Device Manager -> Device & Groups, Select the FortiGate with dynamic IP -> Network -> DNS, Enable FortiGuard DDNS, create Dynamic DNS entry, and then, push the change to the FortiGate.
  • In FortiManager using the Install Wizard push the VPN config to the FortiGate.
    • Install validation does not give any error.
    • remotegw-dns has now the Domain of the interface used as the VPN interface used on the peer FortiGate.

 

6.png

 

Related documents:

VPN Manager

DDNS Support

Displaying the device database
Labels:
583
Suggest New Article
Article Feedback
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2025 Fortinet, Inc. All Rights Reserved.