Tunnel interface configuration

You must assign a static IP address to the tunnel interface. FortiSASE security points of presence uses this to establish BGP peering to dynamically learn routes to your environment.

config system interface
    edit "VPN1"
        set vdom "root"
        set ip 192.168.10.253 255.255.255.255
        set allowaccess ping
        set type tunnel
        set remote-ip 192.168.10.254 255.255.255.0
        set snmp-index 13
        set interface "port1"
    next
end