Route-overlap allow command fails

PCBarnes · ‎03-28-2024

Hi

I'm trying to allow multiple IPSec dial-up connections from the same source IP, and I found help here: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Allowing-multiple-IPSec-dial-up-connection...

My problem is, that I get an error, when I try to set the "route-overlap allow" command. It just says "unknown action 0"

I have a Fortigate 60F with firmware v7.4.3

Regards Thomas Barnes

ozkanaltas · ‎03-28-2024

Hello @PCBarnes ,

It's interesting, I tried with your settings in my lab environment. The command does not work like yours.

Also, I have a dial-up tunnel configuration (FortiClient). In this type, the command is working.

Can you try it like that?

If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW

View solution in original post

PCBarnes · ‎03-31-2024

Am I the only one using Fortinet VPN dial-up connection via IPSEC and L2TP, who has this problem described above? Is there really nothing you can do?

CatInHat · ‎03-31-2024

When attempting to allow multiple IPSec dial-up connections from the same source IP address, you encountered an error when setting the "route-overlap allow" command. This command is probably not supported on your version of Fortigate firmware (v7.4.3). It is recommended that you contact Fortinet support for information about support for this command in your firmware version or possible alternatives to achieve your goal.

Route-overlap allow command fails

Nominate a Forum Post for Knowledge Article Creation