IKEv2

erhan11

Hello, I'm using IKEv2 VPN, is it possible to limit the client to login from specific ip address, for instance home static ip?

james.carson

Hi @erhan11

In order to do this, you'd need to disable the default IPSec policy,
See the "Disable or Enable the Built-in IPSec Policy" section in this article:

https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/bovpn/manual/global_vpn_settings_about_c.html

You'd then need to make a policy from the specific IPs you want to be able to contact the firewall via IPSec, and make that policy to firebox.
*Note that this policy also governs site to site VPNs, and IPSec (IKEv1) mobile VPN, so you will need to account for this in your policies.