I am using a FortiGate 100E firewall.
Until 6.4.8 a static route to an VPN tunnel was removed when the tunnel was down. As it should be.
With 6.4.11 this changed and the route is still active, and other fail over routes cannot take over.
I read that I should remove the static route and let IPSEC VPN add the route automatically.
But that does not work.
At least "set add-route" is not available for "set type static" connections, and "static" is
needed to set the remote-gw address.
How would you configure a failover route, when the route to the failed link is never removed ?
