*SOLVED* Double IPSEC Tunnel settings for one

[WilliamK]

Hi, We' re using a Fortigate 200B and created a IPSEC route based tunnel. I have configured everything the way it has to be. The tunnel is working but when I monitor it to bring it up/down I see 2 tunnels for some reason. The second one is creating interference with the first one and I have no idea where it came from. Does anyone know how it is possible? The only thing that is different between the tunnels is the Proxy ID source. The top one is a range and the bottom one is a single IP address within that range. In the picture you can see what I can in the IPsec Monitor and the bottom part is the IKE setting, which clearly shows only the settings for one tunnel.

[rwpatterson]

Have you rebooted since messing with the tunnel definitions? I have seen strange things happen while I was making changes to phase 2 tunnel definitions. Sometimes I would get strange results. A reboot always cleared things up. There may be some value in just resetting the tunnels (renegotiating) instead. Your mileage may vary.

[WilliamK]

Hi, I rebooted the system and the second tunnel disappeared. Thank you for the reply!

[oheigl]

I guess this could be happening if you have defined a address group in the destination network in the phase2 settings. Is this the case? Can you post your phase2 configuration?

[200B]

If you can' t reboot (in production) is there a particular process that can be restarted instead?

[WilliamK]

I was able to reboot without any issues with other systems. I' m not sure if you can just restart services like you do on a server. Rebooting the firewall doesn' t take long at all.

[FortiRack_Eric]

Don' t reboot the unit, instead: diag vpn ike restart Cheers, Eric