IPsec IKE load balancing based on FortiSASE account information 7.2.5

This information is also available in the FortiOS 7.2 Administration Guide: IPsec IKE load balancing based on FortiSASE account information

The FortiGate device ID is carried by the IKEv2 message NOTIFY payload when it is configured.

config vpn ipsec phase1-interface
    edit <name>
        set dev-id-notification enable
        set dev-id <string>
    next
end

This device ID configuration is required when the FortiGate is configured as a secure edge LAN extension for FortiSASE. It allows FortiSASE to distribute IKE/IPsec traffic according to the FortiGate device ID to achieve load balancing.

For more information about this feature, see IPsec IKE load balancing based on FortiSASE account information.