How can I use a policy route to control site-to-site IPsecVPN traffic?

Zyxel_Charlie

A user has already established a VPN tunnel and wants to use a policy route to allow traffic from LAN 2 to be transmitted to the VPN tunnel.

Scenario:

Steps:

The traffic can be transmitted between 192.168.99.0/24. and 192.168.100.0/24. Add a rule to forward USG2’s LAN2 (192.168.101.0/24) traffic to the VPN tunnel.

In the device’s web GUI, click Configuration > Routing > Policy Route and use the following parameters to add a new policy route:

For USG1: 

source address: 192.168.99.0/24destination address: 192.168.101.0/24, next-hop: VPN tunnel

For USG2: source address: 192.168.101.0/24, destination address: 192.168.1.99/24, next-hop: VPN tunnel

VERIFICATION:

Verification:

After configuring the policy route, ping 192.168.101.0/24 from 192.168.99.0/24 to see if the traffic can transmit through the VPN tunnel.