Description This article explains Site-to-Site IPsec IKE and ESP traffic
routing behavior when the tunnel is bound to a loopback interface where
VPN cannot establish in asymmetric routing scenario. Scope FortiGate.
Solution Background: FortiOS IKE (I...
Description This article describes how to check the FortiGuard contract
validity for each HA cluster individual unit. Scope FortiGate. Solution
Background: On a standalone unit, it is possible to check FortiGuard
contracts validity from GUI or CLI as...
Description This article describes an issue where ‘Dynamic IP
consistency’ for Carrier Grade NAT (CGNAT) is not working as expected.
In this scenario, CGNAT resource allocation IP Pools are configured with
a range of external IP addresses, and the ex...
Regarding hb-lost-threshold, this article is not accurate, for example
config system ha set hb-lost-threshold 6 set hb-interval 2end
hb-lost-threshold = 6 doesn't mean when 6 consecutive HB packets were
lost it will consider ha pear is lost.. NO, hb-...