VPN routing

Options
Ajay
Ajay Posts: 5
First Comment
in Security

Hi Team,

How do l ensure all my route users can browse around my server successfully, they can connect but not see the server which is on ip address 192.168.16.2 . l have a USG60

Accepted Solution

  • Zyxel_James
    Zyxel_James Posts: 626  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options

    If it's your scenario

    USG60_A:
    LAN1: 192.168.11.0/24
    Local Policy 192.168.11.0/24
    Remote Policy 192.168.12.0/24

    USG_B
    LAN1 192.168.12.0/24
    LAN2 192.168.16.0/24 (server is 192.168.16.2)
    Local Policy 192.168.12.0/24
    Remote Policy 192.168.11.0/24

    Please add policy route for routing the traffic to the server

    For USG60_A:
    Add a policy route
    source address: 192.168.11.0/24
    destination address: 192.168.16.2
    next-hop: VPN tunnel

    For USG60_B
    Add a policy route
    source address: 192.168.16.2
    destination address: 192.168.1.11/24
    next-hop: VPN tunnel

All Replies

  • Zyxel_James
    Zyxel_James Posts: 626  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    edited April 2023
    Options


    Hello @Ajay,
    Could you provide your topology of the network?
    Is 192.168.16.2 in the local policy of your VPN tunnel?
    You can enable the log option for the policy rules and check if there is any blocked log when the users connect to the server.

    James

  • Ajay
    Ajay Posts: 5
    First Comment
    Options

    Good Morning James,

    Thanks for the advice, l have not adjusted the policy control, if l have am not sure how l did it. how do l enable the log to capture this

  • Zyxel_James
    Zyxel_James Posts: 626  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options

    If it's your scenario

    USG60_A:
    LAN1: 192.168.11.0/24
    Local Policy 192.168.11.0/24
    Remote Policy 192.168.12.0/24

    USG_B
    LAN1 192.168.12.0/24
    LAN2 192.168.16.0/24 (server is 192.168.16.2)
    Local Policy 192.168.12.0/24
    Remote Policy 192.168.11.0/24

    Please add policy route for routing the traffic to the server

    For USG60_A:
    Add a policy route
    source address: 192.168.11.0/24
    destination address: 192.168.16.2
    next-hop: VPN tunnel

    For USG60_B
    Add a policy route
    source address: 192.168.16.2
    destination address: 192.168.1.11/24
    next-hop: VPN tunnel

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）