VPN Tunnel Monitoring

[iguarino]

What is generally used for a tunnel interface IP?  Can it be arbitrary or must it be an IP that is part of the tunnel?  I've read the docs on the site, but they don't say all that much about the interface IP itself.

Thanks!

[HULK]

Hello Iguarino,

One of the most common purpose of using a IPSec tunnel interface with an IP address is, if you want to run a Dynamic Routing Protocol (that is OSPF, RIP, BGP) across the VPN tunnel. Hence, you can configure any IP subnet on it.

Thanks

[VinceM]

Hi,

IP on tunnel interface can be very usefull for monitoring too (ping traceroute ...)

V.

[santonic]

I'd definitely recommend using an IP address which is a part of encryption domain (proxy ID) so you don't have to worry about adding extra routes.