Access from client VPN to network in VPN Site to Site Mikrotik

Options
Ershov
Ershov Posts: 3 image  Freshman Member
First Comment First Anniversary
in Nebula

Hello! We have a tunnel with a non-cloud VPN gateway. The VPN client also works fine. We need to access the hosts on the remote site in the tunnel from the client VPN.

Accepted Solution

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,315 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Answer ✓

    Hi @Ershov ,

    Based on your typology and request as the private message, our recommendation as below:

    To enable Client VPN access to Server 2, follow these steps to create a policy route:

    Path: Site-wide > Configure > Firewall > Routing > Policy Route

    Configure the following settings:

    • The source: Client VPN IP address or subnet
    • The Destination: The Data Center CHR IP address.
    • Service: Any
    • Type: VPN traffic
    • Next-hop: choose the tunnel you want to traffic pass.

    Additionally, please verify if any configuration changes are required on your MikroTik router.

    Zyxel_Judy

    Untitled Image

All Replies

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,315 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula

    Hi @Ershov ,

    To better support you, could you share with us:

    • Which Zyxel device and firmware version you are using?
    • What do you mean by the hosts on the remote site? Are you trying to have a VPN client connect to a Zyxel device (Site X) to access the Mikrotik device's local GUI (Site Y)? Or something else?
    • The detailed information about your VPN configuration or enable Zyxel support. Additionally, please provide us with the name of your Nebula organization/site here or via the private message by clinking to my account > Message.

    Zyxel_Judy

    Untitled Image
  • Zyxel_Judy
    Zyxel_Judy Posts: 2,315 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Answer ✓

    Hi @Ershov ,

    Based on your typology and request as the private message, our recommendation as below:

    To enable Client VPN access to Server 2, follow these steps to create a policy route:

    Path: Site-wide > Configure > Firewall > Routing > Policy Route

    Configure the following settings:

    • The source: Client VPN IP address or subnet
    • The Destination: The Data Center CHR IP address.
    • Service: Any
    • Type: VPN traffic
    • Next-hop: choose the tunnel you want to traffic pass.

    Additionally, please verify if any configuration changes are required on your MikroTik router.

    Zyxel_Judy

    Untitled Image

Categories

Nebula Tips & Tricks


    Read more

    Nebula Help Center

    EnglishTiếng ViệtРусскийไทย中文（台灣）