Im trying to configure a simple VPN network with 2 LTE enabled routers at remote locations connecting to my homelab ISR1941 router. I want to collect IoT data from these remotes (wildlife cameras), share Internet access and be able to manage these devices remotelly. I have succedeed with IKEv1 crypto map setup with PSK authentication.
After applying of a ZBF security at lab's router I'm not able to access these devices. IDK if this is because traffic arriving at hub is no-zone traffic or did I mistook policies and set IPSec as inspect instead of passing it both ways. It took me many trials and errors to apply working zone based security but Im satisfied with the result so I don't want to move back to access-lists I had applied earlier.
Reading trough various guides I have set a ikev2 policy allowing two remote devices to connect and both show up as Virtual-Access tunnels on the HUB device. But I'm not able to pass a single packetto there and back fro. Im attaching part of configs with an unfinished FlexVPN policy that I dared to try
I don't need both spokes talking to each other (but it would be OK) and have no need for enterprise class security with certificates and trustpoint. My question is: Is there a simple way to get these three devices to communicate with HUB in way they would show up as logical interface?
