Technical Note: How to bring down the shortcut VPN...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 191820

Description

As of FortiOS 5.4, a dynamic tunneling mechanism (named Auto-Discovery VPN - ADVPN) allows a traditional hub and spoke VPN’s spokes to establish dynamic, on-demand direct tunnels between each other so as to avoid routing through the topology’s hub device.

These dynamic tunnels are called shortcuts. This article provides the CLI command to tear down ADVPN shortcuts.

Solution
VPN shortcut tunnels cannot be flushed via the GUI like normal IPsec VPN tunnels.

To tear down a shortcut, use the below CLI command:
diag vpn ike gateway flush name <shortcut_name>

Related Articles
Technical Tip: Fortinet Auto Discovery VPN (ADVPN)

9947

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Note: How to bring down the shortcut VPN tunnel created by Auto-Discovery VPN (ADVPN)