Technical Tip : IPsec interface not available in policy (policy based ipsec)

This article describes the issue to configure a policy for policy-based IPsec VPN, where the VPN tunnel is not available in the drop-down list of VPN Tunnel.

In order to create the policy, the physical wan interface of the IPsec should be selected in order to be able to select the VPN tunnel.

In this example, the IPsec interface is port1:

The IPsec will not be available if selecting the outgoing interface as 'any' or multiple outgoing interfaces, although the physical interface has been included.

Example 1: Outgoing interface 'any'.

Example 2: Multiple outgoing interfaces.

For this case, the correct configuration is to only select port 1 as the outgoing interface.  

Note:

For the SD-WAN case, only the respective zone is to be selected as the outgoing interface.