Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

RV016 Gateway to Gateway VPN Internet Traffic

I have a RV016 router in place that has numerous Gateway to Gateway VPNs connected to various sites over Comcast Cable. I would like to funnel all traffic through the RV016, but I am only seeing the tunnel traffic going between each.

I think I saw some posts eluding to the fact that since the RV016 only deals with layer 3 that this is impossible. What if I added a route to each of my workstations that router all 0.0.0.0 traffic through the RV016 router. Would this work even if it's really ugly?

What I am trying to avoid is having an open Internet connection at all of my sites. I would rather be able to control it here at the main office's RV016.

Thanks in advance!

Everyone's tags (4)
4 REPLIES
New Member

Re: RV016 Gateway to Gateway VPN Internet Traffic

Hi Garry,

Currently this is not a supported feature on the RV016 router.  There are no provisions to put a default route and have that force all traffic across the IPSec VPN tunnel.

What happens is when you define each IPSec tunnel, you are specifying which traffic (local) will go where (remote).  This then builds the routing table and if a packet is destined for a network across the tunnel, it will be forwarded there.  If it is destined for a network out on the internet, it then forwards the traffic out the WAN and on to the ISP to route.

I hope this answers your question.


Thanks!

Dave

David L. Barrett, Jr.
Silver

Re: RV016 Gateway to Gateway VPN Internet Traffic

Just as an idea.  You can create the tunnel with the remote local network as 0.0.0.0 to force all 0.0.0.0 traffic through the tunnel and use the tunnel as a default route.  I have seen this before where someone wanted all traffic to go through the tunnel to the other location then out to the internet.  It is a lot of overhead but it worked.

Re: RV016 Gateway to Gateway VPN Internet Traffic

New Member

Re: RV016 Gateway to Gateway VPN Internet Traffic

tekliu,

I actually found and tried this solution last night, but below is how my routing table looks on my RV042. When I do a tracert to www.google.com or whatever I can see that the traffic basically hits my router then out through the Comcast modem. If I do anything on the main office subnet 172.16.1.0 then I can see it hit both routers.

Should I maybe reset the router to default and do this from the start? As you can see below all 0.0.0.0 traffic is set to go out through the Comcast gateway 74.94.253.10.

Routing Table Entry List

Destination IP AddressSubnet MaskDefault GatewayHop CountInterface
74.94.253.8255.255.255.252*40ixp1
74.94.253.8255.255.255.252*45ipsec0
192.168.3.0255.255.255.0*50ixp0
192.168.2.0255.255.255.074.94.253.1010ipsec0
192.168.2.0255.255.255.0*50ixp0
172.16.1.0255.255.255.0*50ixp0
default0.0.0.074.94.253.1040ixp1


I can send you all of my config data when if you need it.

Thanks!

1419
Views
0
Helpful
4
Replies
CreatePlease to create content