External IP Alias and VPN

[GabsOliv]

Have a service provider, that routes client public IP address to a private IP used on the firewall WAN interface.

For outgoing traffic, there are no issues. I do the outgoing NAT to the Public IP.

If need to publish a server, I use the provided public ip, and service is reachable.

My Question is with VPN’s, because I can’t do the association of the public ip to the firewall external interface. Any suggestion ?

[GabsOliv]

Hi CheckMates

Found the sollution

Create the internet interface with the public IP

• ip add - 100.64.10.2
• Netmask - 255.255.255.252
• Default Gateway - 100.64.10.1
• O connection monitoring only check the first option (Default gateway connectivity)

Add a second internet connection on the same interface.

• ip add - 62.10.1.20
• Netmask - 255.255.255.252
• Default Gateway - leave in blank
•  

[PhoneBoy · Accepted solution]

Actually you don’t need to do that, you just need to configure Link Selection to use the relevant IP.

[GabsOliv]

I forgot to mention, locally managed appliance

I don't see that option

[PhoneBoy · Accepted solution]