Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 3 subscribers
  • Views 6256 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Routing to VPN Site over Dedicated WAN Line

ThomasLichtenstern1

Hi,

I have to Internet Connections. WAN_A and WAN_B both working fine.

I created a Site2Site VPN to a external site over Connection WAN_B. Tunnel established.

When do a tracert from my internal net it routes to UTM Internal address (thats right)

But than to the address of WAN_A (I think thats the Problem, because it the site is connected via WAN_B) 

I tried with a multipath roule, without success.

What do I have to use/adjust here or any ather option?

Thomas 



This thread was automatically locked due to age.
Parents
  • 0

    Hi Thomas,

    Greetings.

    I suggest you to select the Bind Interface option which can be found inside IPSec connection's configuration tab. PFA screenshot.

    By default, the option is deselected and all traffic originating from the selected local networks and going to the defined remote networks will always be sent through this IPsec tunnel. It is not possible to have multiple identical tunnels on different interfaces because the selector would always be the same. However, if enabled, the defined IPsec selector will be bound to the selected local interface. Thus it is possible to either bypass IPsec policies with static routes or define redundant IPsec tunnels over different uplinks and use multipath rules to balance traffic over the available interfaces and their IPsec tunnels.

    Hope that helps:)

    Thanks

    Sachin Gurung

Reply
  • 0

    Hi Thomas,

    Greetings.

    I suggest you to select the Bind Interface option which can be found inside IPSec connection's configuration tab. PFA screenshot.

    By default, the option is deselected and all traffic originating from the selected local networks and going to the defined remote networks will always be sent through this IPsec tunnel. It is not possible to have multiple identical tunnels on different interfaces because the selector would always be the same. However, if enabled, the defined IPsec selector will be bound to the selected local interface. Thus it is possible to either bypass IPsec policies with static routes or define redundant IPsec tunnels over different uplinks and use multipath rules to balance traffic over the available interfaces and their IPsec tunnels.

    Hope that helps:)

    Thanks

    Sachin Gurung

Children