You must assign a static IP address to the tunnel interface. This configuration is required to support BGP peering between the secure private access hub and the FortiSASE security points of presence.
The IPsec wizard automatically configures the tunnel interface. This topic provides the configuration for reference purposes.
The following settings are only examples. Do not consider them as recommended settings.