Dual VPN's question

[championc1]

Hi all,

I am adding an SDWan overlay onto remote sites, and so I had hoped to build a secondary VPN ipsec tunnel and add to the SDWan zone, and then shut the original tunnel and bring up the new.

Both tunnels are therefore using the same ISP, to the same destination core site.  Both have different passwords and different ike versions

My problem is that, the new tunnel will not connect to the core at all.  I see no port 500 connections even being initiated.

I cannot understand why the new one won't even attempt to reach the core, even if I disable to original VPN interface 

[championc1]

While I could configure 2 x IPSEC Tunnels - one by IP and one by FQDN, the FQDN one won't even try and connect

Does anyone know of another way to REMOTELY configure SDWAN interfaces over an existing IPSEC VPN ?

[Shashwati]

hello

Please refer to the document 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configure-IPsec-VPN-with-SD-WAN/ta-p/20984...