I’m baffled what kind of routing rule I need to route traffic from my local LAN -> ZS box -> VPN tunnel. Everything works fine without the VPN,
My WAN is a 4G modem via pppoe, ETH00 has NAT and DHCP enabled. (All computers on LAN have internet connectivity now, DHCP default gateway = ZS box local address). If I fire up the VPN (commercial service provider), it connects just fine and ZS box has connectivity via VPN (tracepath confirmed).
When VPN is up, all LAN computers lose connectivity to internet (connection to ZS box stays up).
VPN00 has these options and interface VPN00 has NAT enabled:
Dynamic crypto map – is one of the ways to accommodate peers sharing the same characteristics (for example multiple branches offices sharing the same configuration) or peers having dynamic IP addressing. gbwhatsapp 2018
This reply was modified 10 months ago by hassan ali.