To provide more flexible routing methods, policy-based IPsec-VPN is changed to route-based IPsec-VPN.

Changes

After policy-based IPsec-VPN is changed to route-based IPsec-VPN, VPN Gateway has the following changes:

You can view two types of route tables on the details page of a VPN gateway.
  • Policy-based route table: routes traffic based on source and destination IP addresses.
  • Destination-based route table: routes traffic based on destination IP addresses.
For more information, see Route overview.
Route-based IPsec-VPN

Impacts

  • Existing VPN gateways do not support route-based IPsec-VPN. To use route-based IPsec-VPN, update your VPN gateway to the latest version. For more information, see Upgrade a VPN gateway.
  • Newly created VPN gateways support route-based IPsec-VPN by default.
  • SSL-VPN is not affected.