Site-to-Site VPN Routing Internet Traffic

Forum|Forum|9 years ago
April 28, 2017
19 replies
41480 views

So I have something I thought would be quite simple, but I just cannot wrap my head around.

Right now, I have a Site to Site IPSEC VPN setup between my two 100D Fortigates.

What I'm looking to do is route all the traffic from Site B thru Site A so we can use some of the public IPs available at Site A over at Site B. My best thought was to route all the traffic from Site B to Site A and exit out to the internet at Site A, but I cannot get the internet traffic to go thru the tunnel and I was hoping someone could step me thru it and see what I'm doing wrong.

Thanks so much

Robert

ede_pfau

SuperUser

So, what have you done so far? Do you have a default route in place? Policies?

MikePruett

New Member

Yeah, give us an example of how things are on the Gates and we can point you in a general direction.

rwpatterson

New Member

For starters, if you want the Internet traffic to flow through the tunnel, you should set that distance shorter than that of your default gateway (at site B). The tunnel should be your preferred gateway, in other words. You may still wish to go out directly for things like DNS, but that's your call.

Sign up

Login with SSO

Login to the community

Login with SSO