Technical Tip: Error connecting to Security Fabric root over IPSec tunnel when in IPSec aggregate

[rishab444]

Description	This article describes that it is not possible to connect to the Security Fabric root, where the root is over an IPSec tunnel which is part of an aggregate IPSec.
Scope	FortiGate.
Solution	Confirm the aggregate link available under IPSec Tunnels: Confirm this aggregate link is not available to the server as an interface for the Security Fabric connection. This behavior is expected and the tunnels part of the aggregate IPSec can't be used as fabric root. Alternatively, same aggregate could be achieved using SD-WAN. Create a new SD-WAN Zone with the required two tunnels. Create an SD-WAN rule that will exhibit the behavior of an IPSec tunnel aggregate as shown below where Interface selection criteria must Maximize bandwidth. Confirm that now the interfaces created under SD-WAN which are acting like aggregate links can be used as fabric root interfaces.