Routing all traffic over VPN ( Site to Site )

Forum|Forum|7 years ago
December 13, 2018
4 replies
11860 views

Dear all,

I has 2 60D firewall, 1 in HQ and 1 in Branch.

My boss request all traffic from Branch need go through HQ.

I create VPN IPsec Tunnel between 2 offices but can not Routing all traffic from Brand go through HQ.

Can you help me?

PS: I tried with another Devices like Draytek 2925 in Branch and it can routing all traffic to FG 60D but can not go out internet.

kiennt049Author

New Member

Show Traffic on FG 60D HQ. ( 172.16.0.1 is Draytek)

Policy enabled NAT

But Draytek still not go out internet

Toshi_Esumi

SuperUser

just set a /32 static route for the other side of the tunnel public IP toward wan1 then a static default route into the tunnel (tunnel interface name) to solve the routing issue.

Then you need to have a set of policies from inside interface to the tunnel and the tunnel to include interface without NAT. This part is always needed regardless internet needs to going through the tunnel.

I'm assuming the tunnel itself is up with a proper set of phase2 selectors, or default 0/0<->0/0.