Skip to main content
marshalisms
marshalisms
New Member
August 20, 2018
Question

Route all traffic on physical port x over IPSEC Tunnel and port 2 straight out WAN

  • August 20, 2018
  • 1 reply
  • 2755 views

I have a site-to-site VPN established between remote office A and Corp Headquarters.  Currently, all traffic from site A goes through the tunnel to corp, including internet traffic.

 

What I would like to accomplish is this:  Any traffic going through physical interface 1 goes through the tunnel and all traffic connected to physical interface 2 goes out the WAN and NOT through the tunnel.  The end goal of this is that anyone on WIFI would not be able to touch the corp network for security purposes. 

 

Is this possible?  I played around with it some but was not able to get it to work.

    1 reply

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    August 20, 2018

    You have to isolate/identify the traffic from WiFi first before you can re-direct the traffic to either interface1, 2 or any tunnels. If they're destined to interface1 or interface2, it's too late to yank them out and re-direct somewhere else. It's already mixed with other "corporate/enterprise" traffic. And more importantly it wouldn't satisfy the security audit/standard like PCI-DSS. We regularly do it at least with vlans, or vdoms if the auditor has more strict standard.

    Once you separate it, you can re-direct wherever you want let it go.

     

    Terms & ConditionsAccessibility statement