routing via another router through vpn

[jpblcm001]

Hello,

Here is the topo :

RV042G <--------VPN-------> Router1<---lan1-->Router2<---lan2--->

I have a RV042G connected to a router "1" (LAN1) through a VPN. I have another router ( "2" for LAN2) behind the router "1" with another Lan (not bridge, different IP).

At this time, I can PING the router "2" wan IP from the RV042G, but from the distant RV042G I cannot access the devices behind router "2" on LAN2. The opposite is right, from LAN2 I can ping every devices on any LAN included the LAN behind the VPN

On the RV042G, I set a static route to indicate that the IP from LAN "2" was reachable from router"2"WAN, but a traceroute always shows that I don't use the VPN and ask my provider gateway instead. The list of static route is not showing the route I set.

At this point I'm a bit lost. What can I do to tell the RV that the route to router2 is through the vpn and not my provider's gateway ?

Thank you for any help (and sorry for my poor english)

[Seb Rupik]

Hi there,

You will have an ACL which is used by the VPN between RV042G and ‘router1’, this ACL determines which traffic is encapsulated and sent down the VPN. You need to ensure that the LAN2 subnet is included in that ACL as a ‘permit’.

With this configured, any traffic leaving RV042G destined to LAN2 will be routed via the VPN to router1.  I assume that router1 will have an entry for LAN2 in its routing table and will know to route traffic towards router2.

Cheers,

Seb.

[jpblcm001]

Hello Seb, 

Thank-you for your quick help. Where is the access to this ACL ? the RV042G web interface does not show it.

[Seb Rupik · Accepted solution]

Having read this guide:

http://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv0xx/administration/guide/rv0xx_AG_78-19576_310513.pdf

...take a look at page 110. The 'Remote Group' is where you would list the subnets which are accessible via the VPN. Currently this group should contain 'LAN1' so you will need to add 'LAN2' to it.

cheers,

Seb.

[jpblcm001]

Hello Seb, You lead me on the right path. The RV042G doesn't not have the "network policy" function to add like you said, multiple subnets through the VPN, but I created another tunnel with the LAN2 settings to the same distant VPN gateway, I also add the new network policy over there ( the router has the function)... and all is ok now. A big thank-you.