VPN full tunnel + thetering

QuiteSmart

Hi folks.

Scenario: android smartphone connected to an IPSec client to Site VPN IKEv2 with certificate. the VPN is full tunnel, the VPN client is Strongswan. Windows pc connected in thetering to the android smartphone.

Why the traffic created by the Windows pc does not enter the tunnel? Is there a way to force it?

Zyxel_Melen

Hi @QuiteSmart,

So, does your Windows PC not have another Internet link in this scenario?

What's your Windows PC's routing table?

PeterUK

This it due to the way thetering is handled so you need to setup VPN on the PC

valerio_vanni

https://community.zyxel.com/en/discussion/comment/75286#Comment_75286

I tried the same as @QuiteSmart some time ago, but it didn't work.

It should not be Windows routing table: when you use tether, Smartphone is default gateway.

The issue is that Android, when "tethering", routes traffic from clients only to WAN interface. Not to tunnel one.