Site-to-Site Force Tunnel

Hi @KITNIT,

Here’s an example setup for this environment;

In USG60’s configurations you need to add following policy routes;

1-    With the source address of 10.10.10.0/24 will be forwarded to IPSec tunnel with the name of IKEv2

2-    Any traffic to 20.20.20.0/24 will be forwarded to IPSec tunnel with the name of IKEv2

3-    Any traffic from 20.20.20.0/24 will be forwarded to SYSTEM_DEFAUL_WAN_TRUNK

You will also need to add a Security Policy rule;

(Configuration > Security Policy > Policy Control)

Allow the traffic that comes from IPSec_VPN.

In USG40’s configurations you need to add following policy routes;

1-    With the source address of 20.20.20.0/24 will be forwarded to IPSec tunnel with the name of IKEv2

2-    Any traffic to 10.10.10.0/24 will be forwarded to IPSec tunnel with the name of IKEv2

3-    Any traffic from 10.10.10.0/24 will be forwarded to SYSTEM_DEFAULT_WAN_TRUNK

You will also need to add a Security Policy rule;

(Configuration > Security Policy > Policy Control)