gre tunnel problem

[#1]

Hi i have a fortigate310b,the version is 4.0 MR1(v4.0,build0194,100121 (MR1 Patch 3)), and i have a internet exit to connect fortigate port3, and port8 connect to lan switch. than i have to establelish a gre tunnel with cisco router for malaysia vpn, here is my firewall config: -------------------------------------------------------------------------------- edit " gre" set interface " port3" set local-gw 220.189.251.26 set remote-gw 59.42.71.8 next edit " gre" set vdom " root" set ip 10.201.143.154 255.255.255.255 set allowaccess ping set type tunnel set remote-ip 10.210.143.153 set interface " port3" next edit 1 set srcintf " port8" set dstintf " port3" set srcaddr " all" set dstaddr " all" set action accept set schedule " always" set service " ANY" next edit 2 set srcintf " port3" set dstintf " port8" set srcaddr " all" set dstaddr " all" set action accept set schedule " always" set service " ANY" next -------------------------------------------------------------------------------- now i can ping tunnel remote-gw, but can' t ping tunnel ip address: FG300B # execute ping 59.42.71.8 PING 59.42.71.8 (59.42.71.8): 56 data bytes 64 bytes from 59.42.71.8: icmp_seq=0 ttl=249 time=24.8 ms 64 bytes from 59.42.71.8: icmp_seq=1 ttl=249 time=24.5 ms 64 bytes from 59.42.71.8: icmp_seq=2 ttl=249 time=25.1 ms 64 bytes from 59.42.71.8: icmp_seq=3 ttl=249 time=24.5 ms 64 bytes from 59.42.71.8: icmp_seq=4 ttl=249 time=24.5 ms --- 59.42.71.8 ping statistics --- 5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max = 24.5/24.6/25.1 ms FG300B # execute ping 10.201.143.153 PING 10.201.143.153 (10.201.143.153): 56 data bytes Timeout ... Timeout ... Timeout ... Timeout ... Timeout ... --- 10.201.143.153 ping statistics --- 5 packets transmitted, 0 packets received, 100% packet loss now show system gre-tunnel, i see another gre , i want' t to delete the gre,but can' t do it : config system gre-tunnel edit " DYX-GRE" set interface " port3" set local-gw 220.189.251.26 set remote-gw 59.42.71.8 next edit " gre" set interface " port3" set local-gw 220.189.251.26 set remote-gw 59.42.71.8 next end FG300B # config system gre-tunnel FG300B (gre-tunnel) # delete DYX-GRE command_cli_delete:3584 delete table entry DYX-GRE unset oper error ret=-23 Command fail. Return code -23 by the way, i try to change the gre tunnel remote-gw, but the firewall can' t do it: FG300B (gre-tunnel) # edit gre FG300B (gre) # set remote-gw 1.1.1.1 FG300B(gre) # end unexpected to change gateway address! attribute set operator error, -61, discard the setting Command fail. Return code -61 now i have three question: 1. why the gre tunnel can' t ping tunnel ip address ? 2. why i can' t delete the gre tunnel? 3. why i can' t change the gre tunnel remote-gw? could you gave me any help? many many thanks!

[laf]

Download your config then check it with FIND option wherever you find gre word. It might be used by other line, or it' s just might be a bug.