This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSec - Additional IP's

Ran into this one today.

The UTM has IPSec running to 6 sites on it's primary interface. It also has additional static IPv4 addresses as addtional IP's on it's primary interface.

We need to allow IPSec to another RAS server behind the UTM via NAT whilst still using the UTM's IPSec.

But can't choose the additional interface.

This thread was automatically locked due to age.

Parents

0 Jaydeep over 6 years ago

Hi Louis-M

I could not understand your requirements. Do you want to DNAT traffic on the additional interface or DNAT on additional interface to a server over IPSec tunnel?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Jaydeep over 6 years ago

Hi Louis-M

I could not understand your requirements. Do you want to DNAT traffic on the additional interface or DNAT on additional interface to a server over IPSec tunnel?
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Louis-M over 6 years ago in reply to Jaydeep

You will find that you can't DNAT IPSec traffic for an additional IP if you are using IPSec on the Primary interface already. There is no option for it.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 6 years ago in reply to Louis-M

IPsec site-to-site can use an additional IP depending on the definition of the VPN ID Type, Louis, but it applies to all IPsec traffic instead of selected ones. Your idea in your other thread to have multiple Interfaces would seem to be the direction you will want to go.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel