How can I use a policy route to control site-to-site IPsecVPN traffic?

Zyxel_Charlie
Posts: 1,034
Guru Member





A user has already established a VPN tunnel and wants to use a policy route to allow traffic from LAN 2 to be transmitted to the VPN tunnel.
Scenario:

Scenario:

Steps:
The traffic can be transmitted between 192.168.99.0/24. and 192.168.100.0/24. Add a rule to forward USG2’s LAN2 (192.168.101.0/24) traffic to the VPN tunnel.
In the device’s web GUI, click Configuration > Routing > Policy Route and use the following parameters to add a new policy route:
For USG1:
source address: 192.168.99.0/24destination address: 192.168.101.0/24, next-hop: VPN tunnel
For USG2: source address: 192.168.101.0/24, destination address: 192.168.1.99/24, next-hop: VPN tunnel
0
Categories
- 7.8K All Categories
- 1.6K Nebula
- 55 Nebula Ideas
- 53 Nebula Status and Incidents
- 4.3K Security
- 217 Security Ideas
- 910 Switch
- 41 Switch Ideas
- 809 WirelessLAN
- 16 WLAN Ideas
- 5K Consumer Product
- 132 Service & License
- 260 News and Release
- 49 Security Advisories
- 6 Education Center
- 573 FAQ
- 273 Nebula FAQ
- 132 Security FAQ
- 73 Switch FAQ
- 72 WirelessLAN FAQ
- 7 Consumer Product FAQ
- Documents
- 34 Nebula Monthly Express
- 67 About Community
- 40 Security Highlight