To provide more flexible routing methods, policy-based IPsec-VPN is changed to route-based IPsec-VPN.
After policy-based IPsec-VPN is changed to route-based IPsec-VPN, VPN Gateway has the following changes:
- Policy-based route table: routes traffic based on source and destination IP addresses.
- Destination-based route table: routes traffic based on destination IP addresses.
- Existing VPN gateways do not support route-based IPsec-VPN. To use route-based IPsec-VPN, update your VPN gateway to the latest version. For more information, see Upgrade a VPN gateway.
- Newly created VPN gateways support route-based IPsec-VPN by default.
- SSL-VPN is not affected.