Route single host internet traffic via IPSEC remote gateway

Hi Robert,

Configure a MASQ rule and firewall rule (VPN to WAN) for the specific IP Address for which you want to allow internet traffic.

Thanks

edit

edit

I should have said - I already had the masq rules and firewall rules in place on the remote side...

This is what my local site has configured:

You can't use Policy Routes for IPsec VPNs unless you bind the IPsec Connection to an Interface - and then you will have a lot more work to do.

The easiest solution here would be to SNAT the traffic into a new tunnel:

• Create a Host definition in both UTMs like "Phantom .0.4" = 10.0.4.4 (for example).
• In Site 1, create a new S2S with "Phantom .0.4" in 'Local Networks' and "Internet" in 'Remote Networks'. Don't select 'Strict Routing'.  Make a NAT rule 'SNAT : {10.0.0.4} -> Any -> Internet : from Phantom .0.4'.
• In Site2, configure the new S2S with "Any" in 'Local Networks' and "Phantom .0.4" in 'Remote Networks'

Did that do what you needed?

Cheers - Bob

Thanks Bob... that works with a masq rule on the internet side for Phantom > uplink interfaces
.

Internet browsing works for most, but I have found that some sites do not load - speedtest.net is a good example.

What could be stopping that do you think?

Robert, we have an unwritten rule here - one topic per thread - that helps others find answers in the future, helping to avoid new threads that ask the same question.

Cheers - Bob