topic ClusterXL - Loopback interface for IPSec VPN, Client VPN, and NAT(R80.40) in Firewall and Security Management

ClusterXL - Loopback interface for IPSec VPN, Client VPN, and NAT(R80.40)

hdas — Mon, 14 Jun 2021 09:57:49 GMT

Hello,

Question - is there any way to configure multiple loopback interfaces and use them as a source for IPSec VPN (Cluster properties->IPsec VPN->Link Selection), Client VPN, and NAT?

My internet connection is through a private subnet point-to-point and static routing.

Thank you,

Re: ClusterXL - Loopback interface for IPSec VPN, Client VPN, and NAT(R80.40)

PhoneBoy — Wed, 16 Jun 2021 22:01:02 GMT

You can create loopback interfaces, but they're not strictly necessary as none of the functions in question actually require or use it.
Note that using different IPs to terminate different VPNs requires changing the Link Selection settings and the only way to get different VPN tunnels to use different IPs is via routing.
A fixed IP per VPN tunnel is likely an RFE.