L2TP VPN traffic routing to VPN tunnel

PuuhaPete · October 2022

Hi,

I have a Zyxel Flex 200 firewall, which I manage trough nebula.

My Firewall has the ip 192.168.1.1
L2TP vpn is set up to use 192.168.3.0/24

I'm in the process of setting up a VPN site to site tunnel to Azure and I need to be able to access the network on Azure. The network on Azure is: 172.10.1.0/24. The creation of the tunnel seems simple enough.

How can I route L2TP traffic so that it work to both the 192.168.1.0/24 network (this works already by default) and the network behind the VPN tunnel on Azure (172.10.1.0/24)?

Zyxel_Jeff · October 2022

Hello @PuuhaPete

Welcome to Zyxel community. According to your requirement, you could configure a policy route as below: source IP is L2TP IP range and destination IP is remote site IP range, Type : VPN Traffic and the Next-Hop please choose that VPN tunnel.

Image: https://us.v-cdn.net/6029482/uploads/editor/a6/4g0q1nw26gl9.png

As for another question, once you establish L2TP on your device, all traffic will be passed through the L2TP tunnel.
Thanks.

PuuhaPete · October 2022

I tested some more and it seems that all of the internet traffic on the computer connecting through L2TP is routed through the L2TP tunnel.
Is this correct?

Zyxel_Jeff · October 2022

Hello @PuuhaPete

Welcome to Zyxel community. According to your requirement, you could configure a policy route as below: source IP is L2TP IP range and destination IP is remote site IP range, Type : VPN Traffic and the Next-Hop please choose that VPN tunnel.

As for another question, once you establish L2TP on your device, all traffic will be passed through the L2TP tunnel.
Thanks.

PuuhaPete · October 2022

Thanks for your advice.
Do I also need to enable the Use VPN check box under Site-to-Site VPN for the 192.168.3.0 network?

Image: https://us.v-cdn.net/6029482/uploads/editor/43/77il7gcoxfkv.png

Zyxel_Jeff · October 2022

PuuhaPete said:

Thanks for your advice.
Do I also need to enable the Use VPN check box under Site-to-Site VPN for the 192.168.3.0 network?

The "Use VPN" switch means your local policy for the site-to-site VPN. According to your setting, the first priority local policy is lan1192.168.1.0/24. So, you won't enable the "Use VPN" switch on 192.168.3.0/24 and you still can use L2TP VPN and site-to-site VPN services. Thanks

.

L2TP VPN traffic routing to VPN tunnel

Accepted Solution

All Replies

Categories

Nebula Tips & Tricks

Nebula Help Center