Hi,
I’m a bit new in VyOS and I was able to create a ipsec vpn tunnel site-to-site between exoscale and my Palo alto firewall (remote side).
I’d like to specify different remote subnets like:
tunnel 0
local prefix 10.5.0.0/24
remote prefix 10.11.0.0/16
tunnel 1
local prefix 10.5.0.0/24
remote prefix 10.1.0.0/16
tunnel 2
localprefix 10.5.0.0/24
remoteprefix 10.2.0.0/16
But in my case, only the traffic through tunnel 2 works.
I found in the web that for using multiple remote prefix with one SA I need to use VTI instead of ETH.
I need help for this setup please. I.e. I ignore which IP I have to set in my VTI. Is an IP inside my local prefix subnet or different?
Thank you for your help guys,