VPN2S Site to Site VPN (full tunnel mode)

mumma · October 2018

Hi

I've set up a site-to-site VPN between Site A (local Subnet 192.168.21.0) and Site B (local Subnet 192.168.51.0). Both Sites run a ZyWALL VPN 2S with latest firmware. I can access Subnet 192.168.21.0 from Site B. But I wan't all traffic from Site B to pass Site A.

I tried the Option "Full tunnel (Force all traffic to cross the VPN tunnel to the remote site)". The result is no internet acess from Site B.

What do I miss?

Both ZyWALLs are behind NAT.

Screen Shot Site B with "Full tunnel" unchecked (uses local Gateway for internet access). Tried check the option -> no internet access.

Cheers

Image: https://us.v-cdn.net/6029482/uploads/editor/7q/0tx5rkbca952.png

Zyxel_Emily · October 2018

Hi @mumma,

Regarding to your question "Force the traffic of site B to access the Internet through the WAN of site A"--it's not supported on VPN2S because VPN2S does not support policy route or SNAT over IPSec VPN tunnel. I would like to move your request to the ideas section.

Zyxel_Emily · October 2018

Hi @mumma,

Regarding to your question "Force the traffic of site B to access the Internet through the WAN of site A"--it's not supported on VPN2S because VPN2S does not support policy route or SNAT over IPSec VPN tunnel. I would like to move your request to the ideas section.

mumma · October 2018

Hi Emily, thanks for the response! Not the response I was hoping for but it answers my question;-) For my use case that would be a great feature. Ideas section sounds good. Thanks!

VPN2S Site to Site VPN (full tunnel mode)

Accepted Solution

All Replies

Categories

Security Help Center