SG-3100 - routing all internet access over IPSEC tunnel

[dhb]

I have configured a working IPSEC v2 tunnel between a remote location and my location. The far end user can see servers and PCs on my local network as desired.

However I would like the far end to access all external internet connections through the local gateway here, rather than the SG-3100 gateway at the far end, is this possible?

Thanks

D.

[stephenw10]

Yes. Screenshots here are outdated but the settings are the same:
https://docs.netgate.com/pfsense/en/latest/vpn/ipsec/routing-internet-traffic-through-a-site-to-site-ipsec-vpn.html

Steve

[dhb]

Aha that's great, thanks. Just need to change the one Phase 2 setting to 0.0.0.0/0 on the existing tunnel it appears.

Since we have a Barracuda F-series on the near end I'll need to translate those Netgate DEST NAT settings over, I imagine that should be do-able.

Cheers.

D.