remote access vpn to other site to site

MarkoPP

our client has 5 locations which are connected by Nebula site to site vpn.
one site has a remote access vpn connection.
Can it be done so that other offices can also be accessed via that remote access vpn connection

Zyxel_Chris

@MarkoPP

Yes, you can use remote access VPN (L2TP) to access other site via VPN tunnel.

But be aware that to add the policy route in these 2 sites then can work.

Policy routing type should select as "VPN traffic"

For instance L2TP pool subnet is 192.168.100.0/24 connect to site A (192.168.101.0/24) and site A connect VPN tunnel to siteB (192.168.102.0/24)

In site A policy route:

src: 192.168.100.0/24, dst: 192.168.102.0/24, Next-Hop: VPN tunnel name

In site B policy route: to redirect the traffic back

src: 192.168.102.0/24, dst: 192.168.100.0/24, Next-Hop: VPN tunnel name

Zyxel_Chris

Hello community,

Additional configuration approach on this case, you can also simply toggle on "Remote Client VPN" when you are using the Site-to-Site or Hub-and-Spoke application.

Zyxel_Chris

@MarkoPP

Yes, you can use remote access VPN (L2TP) to access other site via VPN tunnel.

But be aware that to add the policy route in these 2 sites then can work.

Policy routing type should select as "VPN traffic"

For instance L2TP pool subnet is 192.168.100.0/24 connect to site A (192.168.101.0/24) and site A connect VPN tunnel to siteB (192.168.102.0/24)

In site A policy route:

src: 192.168.100.0/24, dst: 192.168.102.0/24, Next-Hop: VPN tunnel name

In site B policy route: to redirect the traffic back

src: 192.168.102.0/24, dst: 192.168.100.0/24, Next-Hop: VPN tunnel name

MarkoPP

Thank you chris

MarkoPP

can we use ipsec or should it be l2tp

Zyxel_Chris

@MarkoPP
Use L2TP should be fine.

Zyxel_Chris

Hello community,

Additional configuration approach on this case, you can also simply toggle on "Remote Client VPN" when you are using the Site-to-Site or Hub-and-Spoke application.