Configure a tunnel interface to connect to and establish
a VPN tunnel.
Where Can I Use
This? | What Do I Need? |
To set up a VPN tunnel, the Layer 3 interface at each end must have a logical tunnel interface
for the firewall to connect to and establish a VPN tunnel. A tunnel interface is a
logical (virtual) interface that is used to deliver traffic between two endpoints.
If you configure any Proxy IDs, the Proxy ID is counted toward any IPSec tunnel
capacity.
The tunnel interface must belong to a security zone to apply a policy rule and it must be
assigned to a logical router in order to use the existing routing infrastructure.
Ensure that the tunnel interface and the physical interface are assigned to the same
logical router so that the firewall can perform a route lookup and determine the
appropriate tunnel to use.