RV325 Gateway-Gateway tunnel routing

[dgingrich]

I have a /24 block of public IP addresses that I would like to split between two sites. This block is routed to site MAIN. I would like to send a portion of that block to a site REMOTE over a VPN tunnel (the Internet connection at REMOTE has a single public IP available).  The tunnel works fine, I can communicate between the sites with no difficulty.  The problem I have is I cannot get external sites to follow the VPN tunnel to REMOTE.  Also, devices using one of the remote public IPs from MAIN, need to route out over the tunnel as well.

I have configured static routes, but there is no option available to direct the REMOTE's IPs over the tunnel.  The only options are WAN1 and LAN.  How do I tell a static route to use the tunnel? 

-dg

[Michael Swenson]

Thanks you for contacting Cisco.

Only interesting traffic defined in the VPN policy, will traverse the tunnel.  What is the goal with the public IP access across the tunnel?

Best Regards,

[dgingrich]

Where is the VPN policy defined?  All I see is the ability to define the local and remote networks on both ends of the tunnel. But nothing defining the source and destination of the traffic itself. That would be perfect.  But I do not see that available on the RV325.

[Michael Swenson]

Hello,

 The local and remote networks are the only settings on the VPN.  This is the "interesting traffic".

Static routes on the Advanced Routing tab is the function to define the source and destination of the traffic.  The destination would be an IP address on the remote network.

Regards,

[dgingrich]

Yes that is what I expected. but it does not work. When you enter a static route, you are only offered the choice to send it to the LAN or WAN1 interface.  The tunnel is not a choice.  It works from the local LAN to the REMOTE LAN, but traffic received from outside on the WAN interface to a destination at the REMOTE site, fails. It actually follows the default route (because the address does not exist locally) and is returned back out the WAN interface.