Question about changing the interface of an IPSEC Connection

[sascha111]

Hello @ all,

If have 3  pulic IP WAN Addresses. E.g.

1. 210.120.123.10
2. 210.120.123.11
3. 210.120.123.12

It is  possible to use the second IP (210.120.123.11) for the ipsec interface? Or can I only use the first address of my range for the my ipsec-gateway
How can I do this?

Regards

[dotdash]

Create a CARP VIP for .11, then switch the interface of the IPSec tunnel to the CARP IP.

[kopie0123]

Hi,

Firewall -> Virtual IPs -> Create an IP Alias.

.10 as interface IP
.11 as Virtual IP

In the ipsec configuration you can chosse interfaces and virtual IPs.
We are using diffrent IPs for IPSEP, OpenVPN and NAT - works fine!

Regards