topic Can a IPSec tunnel entry be used by muliple connections in General Topics

Can a IPSec tunnel entry be used by muliple connections

soehlrich — Wed, 29 Jun 2016 07:41:31 GMT

Hi, We have a number of (25+ ) remote 4G modems, that we wish to have VPN'd into our network. The modems can do L2TP/IPSec, IPSec, PPTP. Each modem has a WAN interface which is dynamic and a LAN interface with either one or two devices connected to it. We want to be able to connect to the modem LAN interface and the devices behind it from our central network. I have a modem setup that creates a working VPN and it all works fine. I have a IKE Crypto, IPSec Crypto and IKE Gateway all setup and working. IPSec Tunnel is setup along with a tunnel interface. My question is - Do I need to setup (add) a separate tunnel interface and/or IPsec tunnel for each modem that connects ? I can assign different and static IP for all devices on the remote networks or I can setp up each in it own subnet ie 192.168.200.0/29 etc (that would give me 14 address at each location or can I set them all up on the one 192.168.200.0/24 network and make sure all IP are unique for every device. Hope I have explained well enough and apologies if this is a dumb question. Thanks

Re: Can a IPSec tunnel entry be used by muliple connections

soehlrich — Wed, 29 Jun 2016 07:49:50 GMT

Sorry my mistake /29 is 6 usable IP address's. I am testing out a tunnel interface with 192.168.200.0/24 and using that for all IPSec tunnels creating one for each network ie 192.168.200.9/29 etc. Was just trying to avoid having to make 25+ entries and manage them.

Re: Can a IPSec tunnel entry be used by muliple connections

santonic — Wed, 29 Jun 2016 09:13:19 GMT

I don't think PA will create multiple IPSEC tunnels for the same PSK (or whatever you are using for ID). Each new tunnel request might delete previus one.