Question about changing the interface of an IPSEC Connection

sascha111

Hello @ all,

If have 3 pulic IP WAN Addresses. E.g.

1. 210.120.123.10
2. 210.120.123.11
3. 210.120.123.12

It is possible to use the second IP (210.120.123.11) for the ipsec interface? Or can I only use the first address of my range for the my ipsec-gateway
How can I do this?

Regards

dotdash

Create a CARP VIP for .11, then switch the interface of the IPSec tunnel to the CARP IP.

kopie0123

Hi,

Firewall -> Virtual IPs -> Create an IP Alias.

.10 as interface IP
.11 as Virtual IP

In the ipsec configuration you can chosse interfaces and virtual IPs.
We are using diffrent IPs for IPSEP, OpenVPN and NAT - works fine!

Regards