IPSEC VPN Tunnel Traffic Terminate on VLAN interface (under Physical LAG)

[heyyo]

Hi Team,

Is it possible to configure an IPSec VPN tunnel in which its traffic will be terminated on a VLAN interface (In physical LAG interface) for DMZ? 

Seemed like I cannot find a related KB link for this. I hope you can help me.

Thanks!

[funkylicious]

hi,

in theory you could do that and the configuration would be similar to any KB/guide, just instead of selecting the wan interface, you would select the vlan one.

also, configuring a ipsec interface over the internet which terminates on a vlan interface, if this vlan is not configured with a public ip address, consider creating VIPs for UDP/500, UDP/4500 for it and putting the phase1 in passive.

[AEK]

IPsec operates at OSI L3, so it should be agnostic to interface type (VLAN or physical).