l2tp-VPN Routing

Thanks for jumping in.

We currently have site to site tunnels from our San Jose data center to all our retail showrooms and the Chicago data center.

But what I want to do is to still have our outside sales staff connect to the San Jose data center, but route specific RDP requests to the Chicago data center. (which we have a site to site tunnel).

This is because we're moving our terminal server cluster to Chicago.

Perhaps another bit of info. The lt2p vpn connections are issued 10.1.1.10 - 10.1.1.20 subnet ip numbers. But they can Remote Desktop to the trusted lan ip #'s which are 192.168.1.0/24. This is a standard feature of l2tp vpns.

Normally, when establishing an l2tp vpn connection from a remote device (laptop etc), all internet services which were operational before the l2tp vpn connection is made are shut down. This creates a secure single connection between the two devices.

An additional element of the l2tp configuration which is needed to allow web browsing from an l2tp connected device, are two routing table entries.

It is possible, I could give the lt2p subnet connections a new set of issued ip address, to put them on the same chicago subnet of 172.24...

I just figure a routing entry or firewall entry or something would route devices connected to the San Jose data center USG 1000 to the Chicago data center.

I'll be playing with configuration ideas, but any (been there done that) ideas are most welcome.

Best