IKEv2 IPv6 tunnel with dynamic endpoint from one IP

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

IKEv2 IPv6 tunnel with dynamic endpoint from one IP

L3 Networker

With IPv4 it is possible to build multiple IPSec tunnels from one interface IP with dynamic/unknown destinations and separate them based on the IKE peer IDs. That configuration is accepted by the firewall.

As for IPv6, as soon as one source interface is used for multiple IPSec tunnel with dynamic peers, the following error is shown during commit:

• IKEv2 gateway CUSTOMER1-GW peer gateway address :: is not unique among gateways using local address xxxx:xxx:xx:x::2/64.(Module: ikemgr)
• IKEv2 gateway CUSTOMER2-GW peer gateway address :: is not unique among gateways using local address xxxx:xxx:xx:x::2/64.(Module: ikemgr)

 

As soon as source IPv6 for one of the tunnel is changed to a different one - commits succeeds.

 

This looks like a unnecessary limitation to me as IPv4 is accepting this configuration just fine.

Maybe not the most widely used configuration, but any input on this?

1 REPLY 1

Community Team Member

Hi @nikoo ,

 

Looks like a missing feature.  Please check with your account manager if it's something that's on the roadmap or have him create a feature request for you which you can then add your vote to.

 

NGFW 

 

Cheers,

-Kiwi.

 
LIVEcommunity team member, CISSP
Cheers,
Kiwi
Don't forget to hit that Like button if a post is helpful to you!
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!