Skip to main content
heyyo
heyyo
Explorer III
August 18, 2025
Question

IPSEC VPN Tunnel Traffic Terminate on VLAN interface (under Physical LAG)

  • August 18, 2025
  • 2 replies
  • 432 views

Hi Team,

 

Is it possible to configure an IPSec VPN tunnel in which its traffic will be terminated on a VLAN interface (In physical LAG interface) for DMZ? 

 

Seemed like I cannot find a related KB link for this. I hope you can help me.

 

Thanks!

2 replies

funkylicious
SuperUser
funkylicious
SuperUser
August 18, 2025

hi,

in theory you could do that and the configuration would be similar to any KB/guide, just instead of selecting the wan interface, you would select the vlan one.

also, configuring a ipsec interface over the internet which terminates on a vlan interface, if this vlan is not configured with a public ip address, consider creating VIPs for UDP/500, UDP/4500 for it and putting the phase1 in passive.

"jack of all trades, master of none"
AEK
SuperUser
AEK
SuperUser
August 18, 2025

IPsec operates at OSI L3, so it should be agnostic to interface type (VLAN or physical).

AEK
Terms & ConditionsAccessibility statement