How can I use a policy route to control site-to-site IPsecVPN traffic?
The traffic can be transmitted between 192.168.99.0/24. and 192.168.100.0/24. Add a rule to forward USG2’s LAN2 (192.168.101.0/24) traffic to the VPN tunnel.
In the device’s web GUI, click Configuration > Routing > Policy Route and use the following parameters to add a new policy route:
source address: 192.168.99.0/24destination address: 192.168.101.0/24, next-hop: VPN tunnel
For USG2: source address: 192.168.101.0/24, destination address: 192.168.1.99/24, next-hop: VPN tunnel