gateway remote on vpn site to site
I need for one computer ip 172.17.0.10/24 on site2 to get internet from gateway 172.21.0.1/24
to exit with router on site1
help me, thanks
sorry for my bad english.
Marco
Comments
-
For this scenario, it need to add policy route on both Site 1 and Site 2, configuration as below,
Site 1:
incoming interface = any, src ip =any, dst ip =172.17.0.10/24, service=any, next hop type = VPN tunnel. <= Routing back to site 2
incoming interface = VPN tunnel, src ip =172.17.0.10/24, dst ip =any , service=any, next type=Auto, source network address translation = outgoing-interface. <= Outgoing traffic NAT
Site 2:
incoming interface = lan, src ip =172.17.0.10/24, dst ip =any, service=any, next hopt (type=vpn tunnel, tunnel name= site to site vpn tunnel you created) <= Redirect the traffic to Site 1.
Just let me know if the host cannot access Internet by site1.
0 -
Hi thanks very much for your information, that work fine.
Now I have to test if the pc 172.17.0.10 (castellanzaprelievi) manages to follow the routes to the wan1/wan2/opt set according to the destination of the services and ip on site1:
0
Categories
- All Categories
- 383 Beta Program
- 2.1K Nebula
- 116 Nebula Ideas
- 80 Nebula Status and Incidents
- 5.1K Security
- 76 USG FLEX H Series
- 247 Security Ideas
- 1.3K Switch
- 69 Switch Ideas
- 907 WirelessLAN
- 34 WLAN Ideas
- 5.9K Consumer Product
- 209 Service & License
- 335 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 1.9K FAQ
- 890 Nebula FAQ
- 415 Security FAQ
- 233 Switch FAQ
- 203 WirelessLAN FAQ
- 46 Consumer Product FAQ
- 137 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 73 About Community
- 62 Security Highlight