FMG SDWAN with backup FEX interface

[frabald]

Hello guys,

I have implemented a new SDWAN Infrastructure Hub-and-Spoke topolgy with FMG 6.4.4 and FGT 6.4.4. In the Hub and Spoke side I have three different type of connection Internet, MPLS and LTE over Fortiextender. My customer wants to test now only the LTE connection but I have some issue with the IPSec Tunnel over the FortiExtender created from the FortiManager. 

I attach the FMG config and the Device configuration Hub and Spoke side. On FortiGate I have configured a p2p network to connect the FortiGate to FortiExtender for connect the device and automatically it create me a logical interface FortiExtender. The navigation over the FortiExtender works fine but when I install the FMG VPN Configuration on the Branch the IPSec Remote Gateway is 10.11.11.1 (the IP configured on the physical interface to the FortiExtender in the Hub Side) and the VPN IPSec tunnel don't comes UP.

Can you some one help me to undertand the issue and solve it please?