Route internet traffic through IPsec VPN tunnel

[MikeLeite]

Hello - We have a FortiGate 30E with 2 VLANs at a new office.  The first VLAN is for devices that just need internet access, the second is for domain connected devices that need to connect to the private LAN at our datacenter.  That connection is done through an IPsec VPN tunnel (FortiGate to FortiGate, other side is a 200E).  The 0.0.0.0/0 routing entry points to the local internet connection so that regular outbound traffic goes over that connection.  However, I'm trying to find a way to route all traffic on the 2nd VLAN over the VPN connection, including internet bound.  In other words, we want internet traffic from that subnet to be routed over our corporate internet connection in the datacenter, not the local office internet connection.  Is there a way to do this?

[Toshi_Esumi · Accepted solution]

I just happen to find almost exact same scenario in this forum last week. @saneeshpv_FTNT described exactly what to do.

https://community.fortinet.com/t5/Support-Forum/Route-two-subnets-to-internet-over-IPsec-tunnel/td-p...

Toshi

[MikeLeite]

Thanks!