AWS delivering an internal IP address over the WAN

[renanrdrigues]

I have a question:

We have Fortigate on AWS, and the WAN IP is delivering the AWS public IP:

However, a LAN IP is configured on the Fortigate interface:

To set up an IPSEC VPN, I obviously have to point to “WAN IP” 54, but how will this communication work if the WAN interface has a LAN IP? Do I need to enable the secondary IP as 54..?

[ozkanaltas]

Hello @renanrdrigues ,

No need to configure a public IP address as a secondary IP. Because AWS natting this public IP address to a private IP address. Because of that, you can create ipsec tunnel with your public ip address. But you should configure nat-t in ipsec configuration.