Can I route traffic to the ipsec vpn tunnel site to site from another subnet?

sukhoruchenko_alexey

I have a vpn tunnel between 192.168.110.0/24 (office 1) and 192.168.101.0/24 (office 2). There is a need to connect a host from another subnet of office 1 (192.168.100.0/24) to office 2. Can I do this without creating another vpn tunnel? I've tried configuring the route now, but I suspect it doesn't work because of NAT or a number of other reasons that I'm not aware of.

Zyxel_Kay

Hi @sukhoruchenko_alexey

You should be able to achieve this by configuring the policy route. Could you please let us know the device models you're using at both sites?

In the meantime, here is an FAQ article that guides you on how to configure a site-to-site VPN with multiple subnets between ZLD and uOS using route-based setup. You can use it as a reference:

https://community.zyxel.com/en/discussion/26483/how-to-configure-site-to-site-vpn-with-multiple-subnets-between-zld-and-uos-using-route-based

Zyxel_Kay

Hi @sukhoruchenko_alexey

You should be able to achieve this by configuring the policy route. Could you please let us know the device models you're using at both sites?

In the meantime, here is an FAQ article that guides you on how to configure a site-to-site VPN with multiple subnets between ZLD and uOS using route-based setup. You can use it as a reference:

https://community.zyxel.com/en/discussion/26483/how-to-configure-site-to-site-vpn-with-multiple-subnets-between-zld-and-uos-using-route-based

sukhoruchenko_alexey

https://community.zyxel.com/en/discussion/comment/71696#Comment_71696

Thanks for the article! Router Models:

zywall usg 100 (office 2)
zywall usg 110 (office 1)