Skip to main content
Bubbabowski
New Member
March 14, 2019
Solved

VPN Connections using Dynamic IP Pool

  • March 14, 2019
  • 1 reply
  • 3227 views

We currently have a working VPN tunnel with multiple vendors using our outside interface's IP address for our Peer IP.  We would like to dynamically NAT our outbound traffic to a SINGLE IP address in our Public IP block and also have remote VPN connections use this IP for their Peer Address also.  Is this possible?

Example: Currently our outside interface's IP is 1.1.1.1, which VPN partners connect to for their peer.  We would like to dynamically NAT all traffic to use 2.2.2.2, which is in a /26 block of public IPs.  We would request that our VPN partners use 2.2.2.2 for their peer IP... that way when we fail over to the DR site, we wouldn't need to reconfigure the tunnel with another public IP address.  Is this possible?  Thanks

Best answer by ede_pfau

According to this post it's possible.

Create a secondary IP address on your WAN interface. Then put

set local-gw <secondaryIP>
into your phase1 to make it listen to this address.

1 reply

ede_pfau
SuperUser
ede_pfauAnswer
SuperUser
March 14, 2019

According to this post it's possible.

Create a secondary IP address on your WAN interface. Then put

set local-gw <secondaryIP>
into your phase1 to make it listen to this address.

Bubbabowski
New Member
March 14, 2019

Wow, this is great.  Thank you!  I have been searching all morning, but missed that somehow.