Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
heyyo
Contributor

IPSEC VPN Tunnel Traffic Terminate on VLAN interface (under Physical LAG)

Hi Team,

 

Is it possible to configure an IPSec VPN tunnel in which its traffic will be terminated on a VLAN interface (In physical LAG interface) for DMZ? 

 

Seemed like I cannot find a related KB link for this. I hope you can help me.

 

Thanks!

2 REPLIES 2
funkylicious
SuperUser
SuperUser

hi,

in theory you could do that and the configuration would be similar to any KB/guide, just instead of selecting the wan interface, you would select the vlan one.

also, configuring a ipsec interface over the internet which terminates on a vlan interface, if this vlan is not configured with a public ip address, consider creating VIPs for UDP/500, UDP/4500 for it and putting the phase1 in passive.

"jack of all trades, master of none"
"jack of all trades, master of none"
AEK
SuperUser
SuperUser

IPsec operates at OSI L3, so it should be agnostic to interface type (VLAN or physical).

AEK
AEK
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors