I have a IPSec tunnel from my on-prem network (10.3.0.0)
to a Google VPC network, for example 10.254.0.0
. It looks like this:
[10.3.0.0/24] <-- IPSec (routers, gateways, etc.) --> [10.254.0.0/16]
I setup routing properly, I can reach both networks both ways. Now the question is: can I route all my on-prem Internet traffic through VPC network?
Google's VPC networks are special in the way they have routing rules created for them. I created all sorts of custom routes trying to route my packets (for example on my on-prem router: 0.0.0.0/0 via 10.254.0.1
, the default gateway for the 10.254.0.0/16
network; the VPC knows how to route back to 10.3.0.0/16
, but won't ). I also tested a lot of different cases.
Is it possible at all? What one have to do to make ping 1.1.1.1
works from on-prem machine with all traffic pushed through the tunnel? Help please.
Best Regards, K.