Skip to main content
Ditmar
New Member
September 21, 2015
Question

Portal connection

  • September 21, 2015
  • 3 replies
  • 3348 views

Is it possible to use a different external IP address for IPSEC connections and SSLVPN Connections?

Would be necessary because I would like to use port 443 for SSLVPN and at my main address 443 is used for another application.

Thank you for your help.

Regards

Ditmar

 

P.S. Firewall FG200B Fw 5.2.3 Build670

3 replies

gschmitt
New Member
September 21, 2015

Ditmar wrote:

Is it possible to use a different external IP address for IPSEC connections and SSLVPN Connections?

Would be necessary because I would like to use port 443 for SSLVPN and at my main address 443 is used for another application.

Thank you for your help.

Regards

Ditmar

 

P.S. Firewall FG200B Fw 5.2.3 Build670

To change the IP of an IPSec Interface go to the CLI and use the following:

config vpn ipsec phase1-interface
    edit "YourInterface"
        set local-gw <IP>
    next
end

Ditmar
DitmarAuthor
New Member
September 22, 2015

Thank you for your answer, but I cannot Change the IPSEC Interface IP address because there are a lot of IPsec tunnels configured. I would like to have a different IP for SSLVPN at the same external port.

jintrah_FTNT
Staff
Staff
September 22, 2015

Hi,

 

You may try creating a secondary IP address on the external interface or create loopback interface or even a VIP associated with ssl.root interface to achieve this.

 

Regards

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.