HINT: FOS 5.2 IPSec Dialup-Tunnel Naming / Concurrent Users

[TheJaeene]

 Hello Forum,

just a little hint on naming Dialup-VPN Tunnels regarding the maximun concurrent Users.

Since established IPSec Dialup Tunnel Interfaces will be distinguished by adding a Sequence Number (eg. tunnel_0 , tunnel_1)

and a VPN Interface Name is limited to 15 characters, the maximum concurrent Users will be limited accordingly.

Just take look at the attached screenshots (max. Concurrent Users) and you may get the clue!

Regards,

Jan  

[emnoc]

I seen that also, but where in the cfg is the  max concurrent user set? I believe this is a bug.

[TheJaeene]

The  Tunnel Name length is the Limit for the max concurrent Users!

[emnoc]

Okay so where is that included in the config file? That what's I talking about. I could never find exactly what/where this was populated in the configuration. If you make name length longer or shorter it indicates different concurrent values but this value is nowhere in the configuration from what I seen.

[ede_pfau · Accepted solution]

The name length limit is an inherent limit, valid for all versions of FortiOS. It is not configurable and thus, not in the config file.

Please have a look at this:

Technical Tip: IPSec VPN phase1 interface name characters limitation best practice

[emnoc]

Okay thanks for the reference URL

I was looking for something in the cfg that set the actual limit,hence the confusion. Never seen that URL KB page before , kinda interesting. Here's an example of the different name lengths.