Accessing another site from mobile tunnel
Options
I have a site to site VPN setup between two USG20-VPN's.
Headquarters - 10.72.177.0/24
Branch Office - 10.72.188.0/24
I also host a VPN for mobile users at each office.
Mobile to Headquarters Tunnel - 10.72.10.0/24
Mobile to Branch Office Tunnel - 10.72.20.0/24
Computers in each office can reach each other (10.72.177.0 - 10.72.188.0), but I would like a mobile laptop connected to the Branch Office Tunnel on 10.72.20.0 to be able to reach computers on the Headquarters network (10.72.177.0).
Thank you.
Headquarters - 10.72.177.0/24
Branch Office - 10.72.188.0/24
I also host a VPN for mobile users at each office.
Mobile to Headquarters Tunnel - 10.72.10.0/24
Mobile to Branch Office Tunnel - 10.72.20.0/24
Computers in each office can reach each other (10.72.177.0 - 10.72.188.0), but I would like a mobile laptop connected to the Branch Office Tunnel on 10.72.20.0 to be able to reach computers on the Headquarters network (10.72.177.0).
Thank you.
0
All Replies
-
Hi @Marcusgtd
You can use policy route to realized your scenario and both of device must be Site to Site VPN tunnel.
(10.72.177.0/24)HQ=====[VPN]=====Branch(10.72.188.0/24)------L2TP(10.72.20.0/24)
After client established tunnel to branch will received 10.72.20.0/24 IP address. And then add policy route on both of device.
On Branch device add policy route:
On HQ device add policy route:
0
Categories
- All Categories
- 435 Beta Program
- 2.7K Nebula
- 176 Nebula Ideas
- 119 Nebula Status and Incidents
- 6.1K Security
- 430 USG FLEX H Series
- 299 Security Ideas
- 1.6K Switch
- 79 Switch Ideas
- 1.2K Wireless
- 44 Wireless Ideas
- 6.7K Consumer Product
- 276 Service & License
- 427 News and Release
- 88 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 4.2K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 83 About Community
- 89 Security Highlight