Hey guys, hope all is going well. We have an interesting issue happening with two of our VPNs.
Site A, the Sophos, connects to Sites B and C through tunnel-based IPsec VPNs. SD-WAN routes are in use to get to Site B, while static routes are used for Site C. The issue is, when we try to ping any address on Site C’s LAN, the traffic gets sent to Site B’s xfrm interface, not Site C’s.
Here’s the setup:
Site A subnet: 10.100.0.0/16
Site B subnet: 192.168.5.0/24
Site C subnet: 10.122.0.0/16
Site B tunnel:
Site C tunnel:
Site B route:
Site C route:
Logs:
What could be causing the issue?
We feel it's someting simple that we're missing. Do you guys see anything wrong with this setup?
Thanks!
Quote