Skip to main content
AhmedGalal
AhmedGalal
New Member
July 17, 2018
Question

VPN mechanism

  • July 17, 2018
  • 1 reply
  • 6963 views

Hi All, 

 

i have a question about IPsec Site to Site Tunnel ... while establishing the tunnel how is the configured source interface communicate to the destination tunnel address ??? is it through routing table or it just send traffic out of the configured interface ??????

    1 reply

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    July 17, 2018

    Interface-based (or 'route based') IPsec VPN always needs a route to the destination subnet, pointing to the local tunnel interface. The phase1 and phase2 definitions won't suffice.

    If you use the VPN Wizard, it will not only gather all phase1 and phase2 information but create a static route, address objects and policies for this VPN.

    AhmedGalal
    AhmedGalalAuthor
    New Member
    July 17, 2018

    this is not what i meant not the tunnel destination network  what i mean the destination tunnel IP the real IP that Source Tunnel connect to establish the tunnel.

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    July 17, 2018

    Ah, sorry, my fault.

    If you mean the remote public address of the remote VPN gateway, that is found via the routing table, like any other target. So it might be found using the default route, or any more detailed route you configure.

    Terms & ConditionsAccessibility statement