Routing Internet Traffic Through a Site-to-Site IPsec Tunnel

Configuration guides, troubleshooting and practical advice for AZTCOFW.

Articles

4 results

Allow IPsec traffic through the firewall

The tunnel should now be operational however no traffic is allowed through it until a firewall rule is added to pass it. The rule must be added to the routers at both sites. From the Firewall menu, choose Rules . Go to t

Configure outbound NAT

In the default setup outbound NAT is configured automatically. We need to set it to Manual in order to add Site A’s subnet. This configuration step is not required on the router at site A. Site B Configuration From the F

Set up the IPsec tunnel Phase 1

Site A Configuration In the VPN menu select IPsec . It opens on the Tunnels tab . Click the + button to create a new Phase 1 setup. (Make sure Enable IPsec is checked and saved.) Enter these values: Field Value Notes Int

Set up the IPsec tunnel Phase 2

Site A Configuration Click + under the Phase 1 entry. It will show an overview of all available Phase 2 entries. Since we haven’t made any yet none are shown. Click + to create a new Phase 2. Enter these values: Field V