IPsec VPN change listening IP

[kcerb]

HI,

it is possible to change listening WAN IP for DialUP IPsec VPN?

I have few external addresses assigned to WAN port and I want to all VPN traffic passed through other than default external IP address (both incoming and outgoing).

regards,

kcerb.

[ede_pfau · Accepted solution]

Hi,

to make a VPN listen on a secondary IP address of a WAN interface, specify it's value in the phase1 configuration:

config vpn ipsec phase1-interface

   edit myDialInVPN

      set local-gw 1.2.3.4

      ...

end

[kcerb]

Hank you.

It works!