Default Route in BOVPNViF Configuration, how to route other Subnet not through BOVPNViF

J_S_0000 · August 2

Hello Forum,
we have two Subnets configured in the Firebox. A Trusted (OfficeNetwork) and a Custom Subnet (GuestNetwork).
Additional we use BOVPNVirtualInterface for a Tunnel to the Main Office. With a Default Route of 0.0.0.0/0.

The Trusted Network route everything through the BOVPNViF-Tunnel (OfficeTraffic and Internet Traffic). That works as expected

Now additionally we want to route the Custom Network direct to the Internet (DNS, HTTP/S, NTP) using the External Interface.

I tried SDWan, but the DefaultRoute is still catching the Traffic an want to route it through the BOVPNVif in the BOVPN Tunnel. I miss something...

Thank you for your thoughts and help !

james.carson · August 4

Try using a standard BOVPN gateway/tunnel pair instead of a BOVPN Virtual Interface. You can specify which routes use the zero route this way.

See:
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/bovpn/manual/vpn_default_route_c.html

J_S_0000 · August 5

Hello, in this case, using the "Classic"-BOVPN this is a working solution.
Thank you

Default Route in BOVPNViF Configuration, how to route other Subnet not through BOVPNViF

Comments