Cisco FPR3k with FMC / multiple WAN IP addresses on the same interface

dardou1814 — Wed, 31 May 2023 07:22:24 GMT

Hello,

Is there any possibilities to assign a secondary ip address on a physical address on FPR3k (FMC managed)?

i.e:

Ethernet1/10 ip add 3.3.3.3/24

Ethernet1/10 ip add 3.3.3.4/24 secondary

Ethernet1/10 ip add 3.3.3.5/24 secondary

I know it is possible to do this on Fortigate or Sophos but on FPR, it seems a bit tricky...

I do not really want to use multiple different physical interfaces... (this is the last resort)

The goal is to create multiple IPSEC VPN to Umbrella for user traffic on the same Data Centers (EU - Paris and London and Prague)

VPN 1: physical interface Ethernet1/10 ip add 3.3.3.3/24 (VTI)---------> Umbrella Data Center EU-Paris

VPN 2: physical interface Ethernet1/10 ip add 3.3.3.4/24 (VTI)--------->Umbrella Data Center EU-Paris

VPN 3: physical interface Ethernet1/10 ip add 3.3.3.5/24 (VTI)--------->Umbrella Data Center EU-Paris

VPN 4: physical interface Ethernet1/10 ip add 3.3.3.6/24 (VTI)--------->Umbrella Data Center EU-London

VPN 5: physical interface Ethernet1/10 ip add 3.3.3.7/24 (VTI)--------->Umbrella Data Center EU-London

VPN 6: physical interface Ethernet1/10 ip add 3.3.3.8/24 (VTI)--------->Umbrella Data Center EU-London

🙂

Re: Cisco FPR3k with FMC / multiple WAN IP addresses on the same inter

Rob Ingram — Wed, 31 May 2023 07:26:32 GMT

@dardou1814 from 7.3 you can now use loopback interfaces for VTIs which might be suitable for your scenario.