Fortinet Document Library

Version:

Version:

Version:


Table of Contents

FortiGate-6000 Release Notes

Download PDF
Copy Link

FortiGate-7000 IPsec VPN load balancing changes

FortiGate-7000 for FortiOS 6.0.6 does not support IPsec VPN load balancing and ipsec-vpn-load-balance must be disabled (and is disabled by default). Just like the FortiGate-6000, when ipsec-vpn-load-balance is disabled, all IPsec VPN traffic is sent to the primary FPM and no load balancing flow rules are required.

Previous versions of FortiOS for FortiGate-7000 used load balancing flow rules. These rules are no longer required and Fortinet recommends that you manually remove them. See Manually deleting IPsec VPN load balancing flow rules.

As well, FortiGate-7000 for FortiOS 6.0.6 no longer requires you to add source and destination subnets to phase 2 configurations.

FortiGate-7000 IPsec VPN load balancing changes

FortiGate-7000 for FortiOS 6.0.6 does not support IPsec VPN load balancing and ipsec-vpn-load-balance must be disabled (and is disabled by default). Just like the FortiGate-6000, when ipsec-vpn-load-balance is disabled, all IPsec VPN traffic is sent to the primary FPM and no load balancing flow rules are required.

Previous versions of FortiOS for FortiGate-7000 used load balancing flow rules. These rules are no longer required and Fortinet recommends that you manually remove them. See Manually deleting IPsec VPN load balancing flow rules.

As well, FortiGate-7000 for FortiOS 6.0.6 no longer requires you to add source and destination subnets to phase 2 configurations.