Sangfor NGAF IPsec VPN not create

Hi There,

I have two NGAFs in HA (active - passive).
License available - Expiration Date: Never, Branch VPN Sites: 10, Lines: 10. Version: 8.0.47
I can’t select an interface in Basic Settings > VPN Paths > +Add
The Add item is not active.
How can I activate it?

Thanks.

Hi.
Have u already enable the VPN service ?

Network>IPSecVPN>Status

HiHi,

Please review the below regarding your SSLVPN License Activation.

Please find the attached file for the License Activation Method.

License Activation Method.pdf (167.76 KB, Downloads: 117)

05 Mar 2024 09:19 Upload

Click file name to download attachment

Go to Basic Settings > VPN Paths > +Add and see if +Add is Active. If not, this could be due to several reasons. You may check some troubleshooting guides below:

1. Check if your user account has administrative privileges to configure VPN paths. You credentials should have permission to add new paths
2. Check if your current license covers the number of desired VPN paths. As you mentioned, 10 branch VPN sites 10 lines so make sure that your license can accommodation those numbers
3. Validate if the interface you intend to use for VPN path is properly configured and enabled on Sangfor NGAF device to be selectable for VPN path creation
4. The version is quite updated but check for possible bugs or limitations of your current version. You may refer to  Sangfor official documentation for additional reference.

Hi, friends.
I have administrator rights to create a VPN.
The licenses are activated and the service is enabled.
This is the first VPN.
NGAF overloaded.

Have u tried to restart your NGAF?

1. Verify Permissions:

    Ensure you have the necessary administrative privileges to create VPN paths. Contact your network administrator if you're unsure about your permissions level.

2. Check License Compatibility:

    Verify that your current license allows for adding new VPN paths. Your license information mentions 10 Branch VPN Sites and 10 Lines. Ensure adding another path wouldn't exceed these limitations.

3. Consider Software Version:

    Sangfor NGAF version 8.0.47 might be older and might have limitations compared to newer versions. Check the Sangfor documentation or support to see if there are known issues with the "Add" button functionality in your specific version.

4. Explore Alternative Options:

    If adding a new VPN path through the user interface is not possible, explore alternative methods depending on your specific scenario. The Sangfor documentation or support might offer guidance on:
        Command-line interface (CLI): Some configurations might be possible through CLI commands.
        Upgrading software: Upgrading to a newer version might resolve the issue if it's a known bug in your current version.

5. Contact Sangfor Support:

    If none of the above suggestions resolve the issue, it's recommended to contact Sangfor support directly. They can provide the most accurate and up-to-date information and assistance specific to your configuration and license situation.

HiHi

Please try rebooting the Sangfor NGAF device and check if the "+Add" button becomes available.
If the above steps do not resolve the issue, contact Sangfor support for further assistance.
Tech.Support@sangfor.com

Hi, friends.
Overloaded (restart ) physically .
I couldn't find any IPsec VPN settings in Cli.
There is only: Sangfor_NGAF_v8.0.47_User Manual_EN.pdf

To activate the interface selection in Basic Settings > VPN Paths > +Add on your NGAF (High Availability) with the given license and version, follow these steps:

1. Ensure that both NGAF devices are running the same version (8.0.47) and have the latest firmware updates installed.
2. Check if the interfaces you want to use for VPN paths are in an up and operational state. If not, bring them up using the appropriate interface configuration commands.
3. Make sure that the interfaces you want to use for VPN paths are not in the same subnet as the management interface of the NGAF. This is a common restriction in the system configuration.
4. Verify that the interfaces you want to use for VPN paths are not already configured as the primary or secondary interfaces in the system settings.
5. If none of the above steps resolve the issue, try resetting the web GUI configuration of your NGAF devices. This can be done through the CLI using the command "reset config" or by accessing the web GUI and navigating to System > Backup & Restore > Reset Configuration.