Changing IP's

[dcol]

I have a working IPsec VPN. I want to use my alternate WAN Interface to connect to it. If I change the IP in my DNS Record I get a policy Error when trying to connect. The certificate uses my OPNsense Hostname and not an IP. I did make sure the Firewall rules were duplicated for the second WAN, LAN, and NAT.

I have created another VPN connection using the new local IP's and it works fine, but changing the DNS record to the secondary WAN does not work.

Any ideas?