FortiManager
FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
smkml
Staff
Staff
Article Id 412970
Description

 

This article describes the IPSec Template changes on the interface IP, and the remote IP does not take changes under install preview. The changes are under Device Manager -> Provisioning Templates -> Ipsec Tunnel -> Select Template -> Select Tunnel -> Tunnel Interface Setup.

tunnel interface setup.png

 

changes does not shows in install preview.gif

Scope

 

FortiManager, FortiGate.

 

Solution

 

Check on FortiGate for this configuration, what value or syntax it should contain.

 

Lotus-kvm35 # config system interface

Lotus-kvm35 (interface) # edit "HUB1-VPN1"

Lotus-kvm35 (HUB1-VPN1) # set ip
<class_ip&net_netmask> IP address and subnet mask (syntax = 1.1.1.1/24).

Lotus-kvm35 (HUB1-VPN1) # set remote-ip
<class_ip&net_netmask> IP address and subnet mask (syntax = 1.1.1.1/24).

Lotus-kvm35 (HUB1-VPN1) # set remote-ip

 

It should accept a syntax of an IP address with a subnet, and it needs to be followed by FortiManager.

 

follow FGT syntax.png

follow FGT syntax.gif

If using metadata variables, it should follow the same syntax.

 

using metadata variable.png

 

metadata variable value 1.png

 

metadata variable value 2.png