nebula route for all internet traffic
All Replies
-
Hi @FabrizioF,
Welcome to Zyxel Community!
May I comfirm your question is that you would like to make all devices under NSG50 to access the Internet via VPN site to site (Non-Nebula VPN peers)?
If so, you may configure a policy route "Type VPN, Src IP any, Dst IP (peer LAN IP address)" on NSG50 and configure a policy route "VPN, Src IP any, Dst IP (NSG LAN IP address) on peer site.
Also, configure a policy route on peer site to make all the subnets under NSG50 are able to surf the Internet.Adam0 -
Thanks Adam for the replyI did not understoond well if I have to do the route policy on both firewall or only on the NSG50.From the site where the NSG50 is, I want to direct all internet traffic to the non-Zyxel firewallthanks again0
-
@FabrizioF,
You have to configure the route policy on both site.
If you only configure it on NSG50 to make all traffic to non-nebula firewall, while no policy is set to the non-nebula firewall, traffic from NSG50 via VPN tunnel does not know where to go back.Adam0 -
Hi Adam, i have created route policy on NSG50 but not on the other firewall (through which all internet traffic will go out). His support has said me that isn't necessary.0
Zyxel Employee
Categories
- 6.8K All Categories
- 1.3K Nebula
- 26 Nebula Ideas
- 28 Nebula Status and Incidents
- 3.8K Security
- 199 Security Ideas
- 691 Switch
- 25 Switch Ideas
- 570 WirelessLAN
- 8 WLAN Ideas
- 4.5K Consumer Product
- 95 Service & License
- 213 New and Release
- 35 Security Advisories
- 479 FAQ
- 216 Nebula FAQ
- 109 Security FAQ
- 72 Switch FAQ
- 66 WirelessLAN FAQ
- Documents
- 20 Nebula Monthly Express
- 41 About Community
- 31 Security Highlight
