remote access vpn to other site to site

MarkoPP · September 2020

our client has 5 locations which are connected by Nebula site to site vpn.
one site has a remote access vpn connection.
Can it be done so that other offices can also be accessed via that remote access vpn connection

Zyxel_Chris · September 2020

@MarkoPP

Yes, you can use remote access VPN (L2TP) to access other site via VPN tunnel.

But be aware that to add the policy route in these 2 sites then can work.

Policy routing type should select as "VPN traffic"

For instance L2TP pool subnet is 192.168.100.0/24 connect to site A (192.168.101.0/24) and site A connect VPN tunnel to siteB (192.168.102.0/24)

In site A policy route:

src: 192.168.100.0/24, dst: 192.168.102.0/24, Next-Hop: VPN tunnel name

In site B policy route: to redirect the traffic back

src: 192.168.102.0/24, dst: 192.168.100.0/24, Next-Hop: VPN tunnel name

Zyxel_Chris · October 2020

Hello community,

Additional configuration approach on this case, you can also simply toggle on "Remote Client VPN" when you are using the Site-to-Site or Hub-and-Spoke application.

Image: https://us.v-cdn.net/6029482/uploads/editor/q6/n72oyndl18tw.png

Zyxel_Chris · September 2020

@MarkoPP

Yes, you can use remote access VPN (L2TP) to access other site via VPN tunnel.

But be aware that to add the policy route in these 2 sites then can work.

Policy routing type should select as "VPN traffic"

For instance L2TP pool subnet is 192.168.100.0/24 connect to site A (192.168.101.0/24) and site A connect VPN tunnel to siteB (192.168.102.0/24)

In site A policy route:

src: 192.168.100.0/24, dst: 192.168.102.0/24, Next-Hop: VPN tunnel name

In site B policy route: to redirect the traffic back

src: 192.168.102.0/24, dst: 192.168.100.0/24, Next-Hop: VPN tunnel name

MarkoPP · September 2020

Thank you chris

MarkoPP · September 2020

can we use ipsec or should it be l2tp

Zyxel_Chris · September 2020

@MarkoPP
Use L2TP should be fine.

Zyxel_Chris · October 2020

Hello community,

Additional configuration approach on this case, you can also simply toggle on "Remote Client VPN" when you are using the Site-to-Site or Hub-and-Spoke application.

remote access vpn to other site to site

Best Answers

All Replies

Categories

Nebula Tips & Tricks

Nebula Help Center