Sending wired and wireless internet different directions

Jonathan_Lobl — Thu, 11 Jun 2020 15:44:27 GMT

I have a customer that wants to route wired traffic in their branch over a star VPN to headquarters as well as through to the internet. There is a star vpn routing option to do just that. (To center, or through the center to other satellites, to internet and other VPN targets)

Their 1550 appliance at the branch office also has wireless in addition to wired. They want that wireless to be like a guest wireless and just go straight out to the internet from that box.

I figured that if that branch’s wireless network source is not included in the branch’s encryption domain that it might work.

Spoiler, I just tried it and it gave me an error, “encryption failure: Clear text packet should be encrypted.”

My feeling is that it might be a limitation of the VPN routing option and that all traffic either goes over the VPN tunnel or is just dropped, but that doesn’t sound right to me.

Has anyone tried this and was able to make it work?

Jonathan

Re: Sending wired and wireless internet different directions

PhoneBoy — Sun, 14 Jun 2020 07:25:12 GMT

By default, the encryption domain (i.e. what goes over the VPN) includes all networks.
Sounds like you need to manually define it here:

Re: Sending wired and wireless internet different directions

Jonathan_Lobl — Tue, 16 Jun 2020 20:08:43 GMT

Thanks,

I convinced them to just route all internet from the branch with the same filtering policy as central and this issue went away.

Thanks anyways.

topic Sending wired and wireless internet different directions in Spark Firewall (SMB)

Sending wired and wireless internet different directions

Re: Sending wired and wireless internet different directions

Re: Sending wired and wireless internet different directions