VPN Connections using Dynamic IP Pool

[Bubbabowski]

We currently have a working VPN tunnel with multiple vendors using our outside interface's IP address for our Peer IP.  We would like to dynamically NAT our outbound traffic to a SINGLE IP address in our Public IP block and also have remote VPN connections use this IP for their Peer Address also.  Is this possible?

Example: Currently our outside interface's IP is 1.1.1.1, which VPN partners connect to for their peer.  We would like to dynamically NAT all traffic to use 2.2.2.2, which is in a /26 block of public IPs.  We would request that our VPN partners use 2.2.2.2 for their peer IP... that way when we fail over to the DR site, we wouldn't need to reconfigure the tunnel with another public IP address.  Is this possible?  Thanks

[ede_pfau · Accepted solution]

According to this post it's possible.

Create a secondary IP address on your WAN interface. Then put

set local-gw <secondaryIP>

into your phase1 to make it listen to this address.

[Bubbabowski]

Wow, this is great.  Thank you!  I have been searching all morning, but missed that somehow.