topic Re: External IP Alias and VPN in Spark Firewall (SMB)

External IP Alias and VPN

GabsOliv — Mon, 08 Feb 2021 11:30:50 GMT

Have a service provider, that routes client public IP address to a private IP used on the firewall WAN interface.

For outgoing traffic, there are no issues. I do the outgoing NAT to the Public IP.

If need to publish a server, I use the provided public ip, and service is reachable.

My Question is with VPN’s, because I can’t do the association of the public ip to the firewall external interface. Any suggestion ?

GabsOliv — Mon, 08 Feb 2021 13:52:04 GMT

Hi CheckMates

Found the sollution

Create the internet interface with the public IP

ip add - 100.64.10.2
Netmask - 255.255.255.252
Default Gateway - 100.64.10.1
O connection monitoring only check the first option (Default gateway connectivity)

Add a second internet connection on the same interface.

PhoneBoy — Mon, 08 Feb 2021 19:38:15 GMT

Actually you don’t need to do that, you just need to configure Link Selection to use the relevant IP.

GabsOliv — Mon, 08 Feb 2021 19:48:43 GMT

I forgot to mention, locally managed appliance

I don't see that option

PhoneBoy — Mon, 08 Feb 2021 20:06:35 GMT