Ipsec with vdom

Hello everyone . We have a fortigate 800d cluster , latley we came accross a need to use the vdom feature and enabled it We have the root vdom and custA vdom , it is a mangment vdom layout My question is regarding vdom routing Currently i dont use numbered vlinks , I need to create an ipsec tunnel for this client How can i achive this ? Can i map a real ip (from my pool) to the vlink inner int ? Thanks for your help