Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

Changes in CLI defaults

Bug ID

Description

613730

Add subscription-id attribute for route table in Azure SDN configuration to allow updating a route table in a different subscription.

config system sdn-connector
    edit "azsdn"
    config route-table
        edit "xxxxxxxxx-rtb1"
            set subscription-id "xxxxxxxxxxxxxxx" <==added
            set resource-group "xxxxxxxxx"
            config route
                edit "internal-forword"
                    set next-hop "172.28.5.4"
                next
            end
        next
    end
end

613876

Add dhcp-ra-giaddr under ipsec phase1-interface.

config vpn ipsec phase1-interface
    edit "1"
        set type dynamic  
        set peertype any
        set net-device disable
        set mode-cfg enable
        set proposal aes128-sha256 aes256-sha256 aes128-sha1 aes256-sha1
        set dpd on-idle
        set assign-ip-from dhcp
        set dhcp-ra-giaddr <==added
    next
end

Changes in CLI defaults

Bug ID

Description

613730

Add subscription-id attribute for route table in Azure SDN configuration to allow updating a route table in a different subscription.

config system sdn-connector
    edit "azsdn"
    config route-table
        edit "xxxxxxxxx-rtb1"
            set subscription-id "xxxxxxxxxxxxxxx" <==added
            set resource-group "xxxxxxxxx"
            config route
                edit "internal-forword"
                    set next-hop "172.28.5.4"
                next
            end
        next
    end
end

613876

Add dhcp-ra-giaddr under ipsec phase1-interface.

config vpn ipsec phase1-interface
    edit "1"
        set type dynamic  
        set peertype any
        set net-device disable
        set mode-cfg enable
        set proposal aes128-sha256 aes256-sha256 aes128-sha1 aes256-sha1
        set dpd on-idle
        set assign-ip-from dhcp
        set dhcp-ra-giaddr <==added
    next
end