Access from client VPN to network in VPN Site to Site Mikrotik

Ershov

Hello! We have a tunnel with a non-cloud VPN gateway. The VPN client also works fine. We need to access the hosts on the remote site in the tunnel from the client VPN.

Zyxel_Judy

Hi @Ershov ,

Based on your typology and request as the private message, our recommendation as below:

To enable Client VPN access to Server 2, follow these steps to create a policy route:

Path: Site-wide > Configure > Firewall > Routing > Policy Route

Configure the following settings:

• The source: Client VPN IP address or subnet
• The Destination: The Data Center CHR IP address.
• Service: Any
• Type: VPN traffic
• Next-hop: choose the tunnel you want to traffic pass.

Additionally, please verify if any configuration changes are required on your MikroTik router.

Zyxel_Judy

Hi @Ershov ,

To better support you, could you share with us:

• Which Zyxel device and firmware version you are using?
• What do you mean by the hosts on the remote site? Are you trying to have a VPN client connect to a Zyxel device (Site X) to access the Mikrotik device's local GUI (Site Y)? Or something else?
• The detailed information about your VPN configuration or enable Zyxel support. Additionally, please provide us with the name of your Nebula organization/site here or via the private message by clinking to my account > Message.

Zyxel_Judy

Hi @Ershov ,

Based on your typology and request as the private message, our recommendation as below:

To enable Client VPN access to Server 2, follow these steps to create a policy route:

Path: Site-wide > Configure > Firewall > Routing > Policy Route

Configure the following settings:

• The source: Client VPN IP address or subnet
• The Destination: The Data Center CHR IP address.
• Service: Any
• Type: VPN traffic
• Next-hop: choose the tunnel you want to traffic pass.

Additionally, please verify if any configuration changes are required on your MikroTik router.