Routing L2TP for access other tunnels

alexpe

https://community.zyxel.com/en/discussion/comment/50614#Comment_50614

Exactly, I want those who connect to the remote access function to be able to access the site-to-site tunnels.

The subnets are from the other tunnels I have site-to-site from my office's lan1_subnet. Two of them make a next-hop for having SNAT configuration.

PeterUK

But do the other sites have the same subnet as other sites? all sites must have diffrenet subnets like 192.168.1.0/24 on one site must not be used or enabled on another site.

I have a setup like you need you connect by remote access then the traffic goes down a site to site tunnel and thats without adding routing rules becuase the site to site has the remote policy subnet.

alexpe

from the remote access 192.168.50.x I need to be able to access the three subnets: 192.168.0.x 192.168.69.x and 192.168.0.64

alexpe

https://community.zyxel.com/en/discussion/comment/50624#Comment_50624

I do not understand what you mean. When connecting through my remote access I need to be able to access the other three subnets of the site-to-site tunnels: 192.168.0.x 192.168.69.x and 192.168.64.x

But I don't know what kind of routing rule to configure for it.

alexpe

https://community.zyxel.com/en/discussion/comment/50624#Comment_50624

I do not understand what you mean. When connecting through my remote access I need to be able to access the other three subnets of the site-to-site tunnels: 192.168.0.x 192.168.69.x and 192.168.64.x

But I don't know what kind of routing rule to configure for it.

alexpe

I do not understand what you mean. When connecting through my remote access I need to be able to access the other three subnets of the site-to-site tunnels: 192.168.0.x 192.168.69.x and 192.168.64.x

But I don't know what kind of routing rule to configure for it.

alexpe

my remote access is set to 192.168.50.x

PeterUK

Testing here you don't need routing rules I was thinking you did but in my setup you don't need them.

What you do need is policy control rule from VPN zone to site to site zone

alexpe

https://community.zyxel.com/en/discussion/comment/50637#Comment_50637

I made a diagram in case it helps

Could you explain what you mean by is policy control rule from VPN zone to site to site zone?

PeterUK

As in firewall rule in my case:

what you might have to do is make three more site to site with your VPN remote access for local policy to remote policy then each other site with VPN remote access for remote policy and there local policy.