IPSec VPN Problem [Error: Remote IP must be set if IP is defined.]

There' s probably a CLI only option to set the remote IP address in FOS 5.x. But aside from this, do you really need the IP addresses on the tunnel interfaces? All of my VPN tunnels run without tunnel interface IP' s. In the ' Interface' section, it' s not about the public IP address but the ' LAN' address of the tunnel interface. edit:

conf system interface     edit mytunnel        set remote-ip x.y.z.t

quoting the v5 CLI Reference, pg. 567: " Enter an IP address for the remote end of a tunnel interface. If you want to use dynamic routing with the tunnel, or be able to ping the tunnel interface, you must specify an address for the remote end of the tunnel in remote-ip and an address for this end of the tunnel in ip. This is only available if type is tunnel."

i checked on a 800C with 5.0.3 200B with 5.0.4 310B with 5.0.5 In all 3 cases, the " remote IP" field is visible in the WebGui. I don' t have a 110C with OS5 by hand to check

I would have been surprised if the Remote IP field was NOT in the GUI, as long as you can set the tunnel IP at all. Browser issue - cache cleared? Which exact version of FOS 5.x are we talking about?

Glad it works now. 100% of my VPN tunnels are unumbered, and of course they work. So your solution is perfectly OK. BTW, I' d upgrade soon. Let' s put it like this, each 5.0 patch resolves a LOT of issues. Currently at 5.0.5.