Can't attach device interface to multiple VPN tunnels

[dirtycache]

Deployment Type

Self-hosted

NetBox Version

v3.7.0

Python Version

3.8

Steps to Reproduce

1. Create VPN -> TunnelA
2. Create termination for TunnelA and attach to Device Interface ("wan")
3. Create VPN -> TunnelB
4. Create termination for TunnelB, attempt to use same Device Interface "wan" as TunnelA termination
5. Fails: wan is already attached to a tunnel (TunnelA)

Expected Behavior

It is possible to attach multiple IPsec tunnels to a single interface on the device; this should be permitted in Netbox as well.

Observed Behavior

Create termination fails: wan is already attached to a tunnel (TunnelA)

[jeremystretch]

This is not supported. You need to create a separate virtual interface for each tunnel.

[dirtycache]

That would work fine if terminations were assigned to logical vti interfaces, aka the tunnel "inside" addresses. But this is the termination, with the "outside" addresses. The wan interface holds the outside address, and there is only one.

Perhaps I'm not understanding how one would document the IPsec outside addresses while needing to create separate virtual interfaces -- essentially dummy interfaces just for the purpose of the tunnel termination?

[jeremystretch]

If you need assistance modeling tunnels, please open a discussion.