Question

Currently, my 2 LANs in IPSec (branch and HQ) are able to communicate, but how do I create a rule or static route when a user from the branch wants to access an application that resolves to "103.24.xxx.xxx" via HQ internet instead of branch internet.

Branch is using RUT240 with firmware: RUT2_R_00.07.03.3

Answer 1

Hello,

  

This should be as simple as adding a static route, which should look something like this:

Where:

• Target - the IP address 103.24.xxx.xxx;
• Netmask - the size of the network that should receive all of the IPsec traffic (if it's a single host - 255.255.255.255);
• IPv4 gateway - the gateway of the other end of the IPsec tunnel;
• Metric - 0;

Static routes can be added by navigating to Network → Routes → Static routes.

I'm unable to test this at the moment, however, it should work. Let me know if it does not, I'll look into it further.

  

Best regards,
DaumantasG

Answer 2

Don't bother because teltonika cannot do interface based routing for IPSec tunnels.