Fabric overlay orchestrator not provide the good wan1 remote IP

[sam76]

Hi, 

I have configure 3 60F like that: 

- 1hub

- 2 Spoke

In the Hub, the WAN 1 ip of the Remote-GW is: "set remote-gw 10.1.230.100"

And in the spoke, IPSEC 1 show 10.1.230.100. But it's the lan IP.

How to change with the wan ip ?

Exemple: config overlays
edit "wan1"
set overlay-tunnel-block 10.10.10.1 255.255.255.0
set remote-gw 10.1.230.100
set interface "wan1"
set bgp-neighbor "10.10.10.253"
set ipsec-phase1 "fabric_vpn_1"
set sdwan-member 1
next

[Anthony_E]

Hello Sam,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello Sam,

We are still looking for someone to help you.

We will come back to you ASAP.

Regards,

[Anthony_E]

Hello Sam,

If the Fabric Overlay Orchestrator is not providing the correct WAN1 remote IP:

1. Verify Configuration: Ensure that the IP address configuration for WAN1 is correctly set on both the hub and spoke devices.  Check the IPsec and BGP settings to ensure they are correctly configured for the SD-WAN overlay.
2. Check Connectivity: Confirm that there is network connectivity between the hub and spoke devices on the WAN1 interface.  Use diagnostic tools like ping or traceroute to verify connectivity.
3. Review Logs: Check the system logs on the FortiGate devices for any error messages or warnings related to the WAN1 interface or SD-WAN configuration.
4. Update Firmware: Ensure that all FortiGate devices are running the latest firmware version to avoid any known bugs or issues.
5. Reconfigure Overlay:  If the issue persists, consider reconfiguring the SD-WAN overlay using the Fabric Overlay Orchestrator to ensure all settings are correctly applied.