After you create an IPsec-VPN connection, you must manually add a VPN Gateway route.
The route-based IPsec-VPN enables you to easily configure and maintain VPN policies, and provides flexible ways for routing traffic.
- Policy-based routes.
- Destination-based routes.
If a policy-based route is used, traffic is forwarded based on both the source IP address and the destination IP address.
If a destination-based route is used, traffic is forwarded based only on the destination IP address.
For more information, see Add Destination-based routes.