Dial-up IPSEC VPN and Point to Point IPSEC VPN on Same Wan Interface

[fcb]

Is this even possible? We currently have all of our WAN interfaces serving our Dial-Up clients but we now need to create a PTP IPSEC tunnel between our Gates and a third party.Can this be done or will the P2P tunnels need to go on a different interface than the Dial-Up tunnels? If so, can anyone point me to a good config guide?

[gfleming]

This can be done. The remote-gw in the s2s phase1-interface should be able to select the tunnel to be used for site-to-site. All other clients will not match the remote-gw and will default to the remoate access tunnel.