| Description | This article describes how to migrate an existing IPSec tunnel interface that is built on one interface. |
| Scope | FortiGate. |
| Solution |
Consider a scenario where there is an established site-to-site IPSec VPN between two FortiGates where the tunnel has been built off WAN1 and the goal is to migrate the IPSec tunnel interface over to WAN2.
FGT_A’s IPsec tunnel is currently built off WAN1 under Network -> Interface -> Expand WAN1:
Under VPN -> IPsec Tunnels, the outgoing interface is using WAN1:
To migrate the tunnel over to WAN2 on FGT_A, the outgoing interface should be selected as WAN2:
The result of selecting a new outgoing interface has been migrated over to WAN2:
Note that FGT_A remote gateway has changed which means on FGT_B the IP address in our IPSec’s network configuration needs to reflect the new gateway:
|
