Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 27 subscribers
  • Views 861 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSec Site2Site | Tunnel all traffic | local breakout for SIP

Manuel Hilgert

Hi, I have a hard time to get the following running (which i setup with bintec routers in 5 minutes....)

I have a XG125 in the main office and a XG85 in a remote office.

Site2Site VPN up and running.
Traffic to WAN and traffic to hq network should be send through the tunnel so wan traffic is filtred in hq XG125.
Works fine if i put "any" into the remote network field in the ipsec on the XG85.
The XG85 has a second internet connection, only used for SIP.
I setup an advanced route: traffic from the telephone system going to the sip endpoint should use gateway 2.
But it seem that the "any" in the ipsec tunnel has a lower metric, traffic from the telephone system is still sent through the tunnel to the hq.

On a bintec this setup would work out of the box since advanced routes are handled with the highes priority.
On the XG i even cant find a COMPLETE routing table that show the VPN/IPSEC routes + metric?!

Thanks if anybody can help me out :)



This thread was automatically locked due to age.
  • 0

    Hello Manuel,

    You can change the route precedence by changing the order.

    Go to Option 4 in console> system route_precedense show this will show the priority list, if you have added "any" in IPsec tunnel connections then you may add a static or policy route by changing the precedence order using command > system route_precedense set #order1 #order2 #order3.