Cannot create tunnel

[Tom_Siegenthaler]

I am trying to create a tunnel for an IPSec connection. Currently using fortigate 200B running V4 MR3 patch 2 (about to upgrade to patch 4). I already have a number oftunnels, the configs look like this: config global config system interface edit " 1OMainSt_IPSec" set vdom " MCHInt" set type tunnel set interface " DMZ-1Office" next but when I try to make another I get: PN-FWHA2 (interface) # edit " 1Otest_IPSec" new entry ' 1Otest_IPSec' added PN-FWHA2 (1Otest_IPSec) # set vdom " MCHInt" PN-FWHA2 (1Otest_IPSec) # set type tunnel command parse error before ' tunnel' Command fail. Return code -61 I also cannot set the interface: PN-FWHA2 (1Otest_IPSec) # set interface " DMZ-1Office" entry not found in datasource value parse error before ' DMZ-1Office' Command fail. Return code -3 From the GUI the tunnel option does not even appear, neither does the correct interface (which is a vlan). Existing tunnels work fine and are configured the same way. Any idea what is happening? I' m desperate for some help here! Tom

[abelio]

Hello Tom and welcome,

ORIGINAL: Tom Siegenthaler I am trying to create a tunnel for an IPSec connection. ..... but when I try to make another I get: PN-FWHA2 (interface) # edit " 1Otest_IPSec" new entry ' 1Otest_IPSec' added PN-FWHA2 (1Otest_IPSec) # set vdom " MCHInt" PN-FWHA2 (1Otest_IPSec) # set type tunnel command parse error before ' tunnel' Command fail. Return code -61 I also cannot set the interface: PN-FWHA2 (1Otest_IPSec) # set interface " DMZ-1Office" entry not found in datasource value parse error before ' DMZ-1Office' Command fail. Return code -3

you' re using a creative way to configure ipsec vpn interface mode ... you cannot create those interfaces by hand, just follow the easy and documented way to configure such tunnels. this pdf is your friend to begin with: http://docs.fortinet.com/fgt/handbook/40mr3/fortigate-ipsec-40-mr3.pdf regards

[Tom_Siegenthaler]

I think I found the real problem. We upgraded from V3 to V4 and these are the V3 command structures. I think they are not fully compatible under V4. Thanks for the manual! Tom