VIP over multiple interfaces

Forum|Forum|11 years ago
September 1, 2015
5 replies
11102 views

Hi,

I'm trying to reach this:

I do have 2 IPSECs VPN over a customer. On the customer side I need to use some prenat and so I have some VIPs.

Those VIPs are attached to the VPN interface. That's a problem because I can't have fully redundance because of limit of the VIP attached to one single interface. (and I can't use interface any).

I tried to ask to support and they suggested me to use soft / hardware switch and make a single logical interface with the two VPNs. Unluckily this is not possible.

I tried to workaround this using loopback interfaces and gre tunnels but it does not work (VIP object can't be linked to loopbacks or gre or zones).

Someone has some suggestion about how to workaround this (if it's possible)?

Thanks

N_Shagar

New Member

I have the same problem, if I set interface as any, the local address(mapped) lost your access to Internet, but I need to send traffic between 2 specific interfaces, but Fortigate let me set only 1.

@oliverlag, does you has been succeeded?