IPSEC tunnel - does it need a dedicated IP address ?

douglas1942 · ‎11-26-2021

Hello, I have a single public IP address on my Fortigate.

If I configured an IPSec tunnel using this address, will this interfere with my regular Internet bound traffic and incoming VIPs that also share this same public IP address ?

Or should I ask the ISP for an additional public IP address for my IPSEC tunnel ?

Thank you.

kcheng · ‎11-26-2021

Hi,

You can use the same public IP for both IPSec tunnel and regular internet traffic as well as incoming VIPs for as long as the port is available for IPSec connection. It is not a requirement to have a dedicated public IP to run IPSec VPN:

Cookbook | FortiGate / FortiOS 6.0.0 | Fortinet Documentation Library

Cheers,
Kayzie Cheng

If you have found a solution, please like and accept it to make it easily accessible for others.

View solution in original post

kcheng · ‎11-26-2021

Hi,

You can use the same public IP for both IPSec tunnel and regular internet traffic as well as incoming VIPs for as long as the port is available for IPSec connection. It is not a requirement to have a dedicated public IP to run IPSec VPN:

Cookbook | FortiGate / FortiOS 6.0.0 | Fortinet Documentation Library

Cheers,
Kayzie Cheng

If you have found a solution, please like and accept it to make it easily accessible for others.