Is it possible to use a different external IP address for IPSEC connections and SSLVPN Connections?
Would be necessary because I would like to use port 443 for SSLVPN and at my main address 443 is used for another application.
Thank you for your help.
Regards
Ditmar
P.S. Firewall FG200B Fw 5.2.3 Build670
Ditmar wrote:To change the IP of an IPSec Interface go to the CLI and use the following:Is it possible to use a different external IP address for IPSEC connections and SSLVPN Connections?
Would be necessary because I would like to use port 443 for SSLVPN and at my main address 443 is used for another application.
Thank you for your help.
Regards
Ditmar
P.S. Firewall FG200B Fw 5.2.3 Build670
config vpn ipsec phase1-interface
edit "YourInterface"
set local-gw <IP>
next
end
Thank you for your answer, but I cannot Change the IPSEC Interface IP address because there are a lot of IPsec tunnels configured. I would like to have a different IP for SSLVPN at the same external port.
Hi,
You may try creating a secondary IP address on the external interface or create loopback interface or even a VIP associated with ssl.root interface to achieve this.
Regards
User | Count |
---|---|
2061 | |
1175 | |
770 | |
448 | |
343 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.