IPsec VPN, route all traffic through VPN tunnel


One of our branch offices has to use an IPsec VPN tunnel to get access to our main office.

We would like to route all traffic from the branch office, through our Fortigate at the main office, included internet traffic.

Main Office: Fortigate 310B
Branch Office: Linksys RV042 v3

Set up route based policies on the Fortigate which allows traffic both ways, and a third policy which allows traffic from the branch office to internet with NAT.

Set up VPN IPsec tunnel on the Linksys correspondent to the settings on the Fortigate.

VPN tunnel works, the branch office can connect to our internal resources, but internet traffic is not routed through the Fortigate.
Tried different settings on the Linksys but can't seem to be able to route internet traffic through the VPN tunnel.

Any suggestions on how to solve this ?

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

The default gateway should point to the tunnel interface. Remember that on the hub site you need to add the NAT rule to the branch network segment.
LenblockAuthor Commented:

Thanks, but figures it out.

If others are looking for the solution:

Update the RV042 with the latest firmware
Earlier firmware has a bug(if you have hardware v3)

Config VPN tunnel, policies etc. as you would usually do and set the following:

Branch Office(Linksys)
Remote group setup:
Local Group:

Main Office(Fortigate)
Local Group (src addr.):
Remote Group (dst addr.):

No need for advanced routing etc. or other config on the Linksys.
Setting up the VPN tunnel like this will make it use the IPsec VPN tunnel for all traffic.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
LenblockAuthor Commented:
Found the solution myself.

Some great posts about how to this if you Google for:
"wildcard forwarding RV042"
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.