Portal connection

[Ditmar]

Is it possible to use a different external IP address for IPSEC connections and SSLVPN Connections?

Would be necessary because I would like to use port 443 for SSLVPN and at my main address 443 is used for another application.

Thank you for your help.

Regards

Ditmar

P.S. Firewall FG200B Fw 5.2.3 Build670

[gschmitt]

Ditmar wrote:

Is it possible to use a different external IP address for IPSEC connections and SSLVPN Connections?

Would be necessary because I would like to use port 443 for SSLVPN and at my main address 443 is used for another application.

Thank you for your help.

Regards

Ditmar

P.S. Firewall FG200B Fw 5.2.3 Build670

To change the IP of an IPSec Interface go to the CLI and use the following:

config vpn ipsec phase1-interface
    edit "YourInterface"
        set local-gw <IP>
    next
end

[Ditmar]

Thank you for your answer, but I cannot Change the IPSEC Interface IP address because there are a lot of IPsec tunnels configured. I would like to have a different IP for SSLVPN at the same external port.

[jintrah_FTNT]

Hi,

You may try creating a secondary IP address on the external interface or create loopback interface or even a VIP associated with ssl.root interface to achieve this.

Regards