IPSEC VPNS outer firewall, ipsec ras vpn on inner firewall same outside address

[ciscokiddy]

Hi,

I initially had a number of ipsec vpns functioning correctly on an outer firewall and an SSL ras vpn terminating on an inner firewall all pointing/terminating on the same outside address on the outer firewall.

Due to a design change the RAS vpn must be changed to ipsec. Can i get this to work using the same outside ip address surely there would be a conflict with ports etc. Any help appreciated. 

[Rob Ingram]

@ciscokiddy 

Yes it sounds like you'd have a conflict

Why not carry on using SSL-VPN? As long as you use TLS/DLTS 1.2 and the strongest ciphers you should be secure.

[ciscokiddy]

Hi Rob,

Thanks for taking the time to reply, however the security policy dictates IPsec only.

Regards

[Rob Ingram]

@ciscokiddy Well either move all VPNs to the inner firewall, nat the traffic and disable ike on the outer firewall. Or get another IP address on the outer firewall and nat the traffic to the inner firewall.