IPSEC tunnel - does it need a dedicated IP address ?

Forum|Forum|4 years ago
November 27, 2021
1 reply
2961 views

Hello, I have a single public IP address on my Fortigate.

If I configured an IPSec tunnel using this address, will this interfere with my regular Internet bound traffic and incoming VIPs that also share this same public IP address ?

Or should I ask the ISP for an additional public IP address for my IPSEC tunnel ?

Thank you.

FortiGate

Best answer by kcheng

Hi,

You can use the same public IP for both IPSec tunnel and regular internet traffic as well as incoming VIPs for as long as the port is available for IPSec connection. It is not a requirement to have a dedicated public IP to run IPSec VPN:

Cookbook | FortiGate / FortiOS 6.0.0 | Fortinet Documentation Library

kchengAnswer

Staff & Editor

Hi,

You can use the same public IP for both IPSec tunnel and regular internet traffic as well as incoming VIPs for as long as the port is available for IPSec connection. It is not a requirement to have a dedicated public IP to run IPSec VPN:

Cookbook | FortiGate / FortiOS 6.0.0 | Fortinet Documentation Library

Sign up

Login with SSO

Login to the community

Login with SSO