Hello,
used products: FortiGate 80F/FortiGate 400F
I have a simple Hub and Spoke Szenario, which works perfectly in 7.4.8 and less. If I upgrade my spoke to 7.4.9 I can't establish my VPN any more.
Spoke says:
ike V=root:0:vpn-pfi-hub: connection expiring due to mode-cfg client IPv4 error
ike V=root:0:vpn-pfi-hub: going to be deleted
ike V=root:0:vpn-pfi-hub: schedule auto-negotiateHub says:
twin connection
Spoke config: mode-cfg, but with manual assigned ip on the interface
Hub config: mode-cfg, no ip assignment
There must have been a change in 7.4.9 - but I can't find it. If I downgrade, everything works.
Kind regards
TwoSoulz
Solved! Go to Solution.
I found the solution:
deactivate on the spoke the "assign-ip" via cli. In the versions before, it didn't matter. Since 7.4.9 it does.
I found the solution:
deactivate on the spoke the "assign-ip" via cli. In the versions before, it didn't matter. Since 7.4.9 it does.
| User | Count |
|---|---|
| 2799 | |
| 1424 | |
| 812 | |
| 749 | |
| 455 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.