Asymetric routing break
-
Hello, I'd like to ask for help resolving asymetric routing issue, here is the topology:
FW1 (one site)
- WAN - no public IP, local VLANs internet access
- LAN - clients, printers
- SERVER - network services
- VPN - TAP OpenVPN client, link to FW2
FW2 (second site)
- WAN2 - public IP, local VLANs internet access
- SERVER2 - network services
- VPN - TAP OpenVPN server (used also for other things than FW1)
When doing port forward from FW2 to service in SERVER2, everything works as it should, problem is making publicly accessible service at SERVER network, portforward there works in only one direction, but packets going back takes WAN route (as they should if they would not been forwarded from WAN2). How to make this work, keeping "unforwared" traffic going through WAN, but forwarded traffic taking correct route through WAN2?
It is probable, that I am missing some (otherwise) obvious setting of gateway/route/NAT somewhere, but I was not able to find it so far, I have my doubt that some advanced setting would resolve this, but any advice would help.