IPSec VRF or mark

Hi all,

I wish to create IPSec VPN and redirect them into differents VRF.

I have try to mark IPSec packets or mark routing (via mangle) but this mark does not seem to be here after IPSec decryption.

Is there is any way to terminate IPSec tunnels into different VRF ?

Same here… :frowning:

Right now, the only VPN I was able to make functional with VRF is the SSTP vpn; since each connections have
an interface, I created static interfaces for each users and I assigned those interfaces to the VRF I want.

So the VPN connections is “terminated” into the correct VRF for the user.

Since IPSec VPN doesn’t have a specific interface, I’m not sure it will work…