05-31-2023 12:22 AM
Hello,
Is there any possibilities to assign a secondary ip address on a physical address on FPR3k (FMC managed)?
i.e:
Ethernet1/10 ip add 3.3.3.3/24
Ethernet1/10 ip add 3.3.3.4/24 secondary
Ethernet1/10 ip add 3.3.3.5/24 secondary
I know it is possible to do this on Fortigate or Sophos but on FPR, it seems a bit tricky...
I do not really want to use multiple different physical interfaces... (this is the last resort)
The goal is to create multiple IPSEC VPN to Umbrella for user traffic on the same Data Centers (EU - Paris and London and Prague)
VPN 1: physical interface Ethernet1/10 ip add 3.3.3.3/24 (VTI)---------> Umbrella Data Center EU-Paris
VPN 2: physical interface Ethernet1/10 ip add 3.3.3.4/24 (VTI)--------->Umbrella Data Center EU-Paris
VPN 3: physical interface Ethernet1/10 ip add 3.3.3.5/24 (VTI)--------->Umbrella Data Center EU-Paris
VPN 4: physical interface Ethernet1/10 ip add 3.3.3.6/24 (VTI)--------->Umbrella Data Center EU-London
VPN 5: physical interface Ethernet1/10 ip add 3.3.3.7/24 (VTI)--------->Umbrella Data Center EU-London
VPN 6: physical interface Ethernet1/10 ip add 3.3.3.8/24 (VTI)--------->Umbrella Data Center EU-London
Solved! Go to Solution.
05-31-2023 12:26 AM
@dardou1814 from 7.3 you can now use loopback interfaces for VTIs which might be suitable for your scenario.
https://secure.cisco.com/secure-firewall/v7.3/docs/loopback-interface
05-31-2023 12:26 AM
@dardou1814 from 7.3 you can now use loopback interfaces for VTIs which might be suitable for your scenario.
https://secure.cisco.com/secure-firewall/v7.3/docs/loopback-interface
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide