How to exempt VPN traffic from PCC

Hello Forum Member

I need your help urgently.

I have 2 ISP link combined together with the use of PCC. The configuration is working fine. Bothe LB and FO are working fine. However I have a GRE tunnel setup to head office through a provider with Managed VPN service. The GRE tunnel was setup though a separate interface on the router (not through the interfaces for the WAN Links). I have configured it successfully and I can reach our ERP server from the router. But I cannot reach ERP from the pc in the LAN. When I did traceroute to the IP of the ERP, the IP was traced to one of the WAN links.

Here is my question, how do I exempt GRE tunnel traffic from the PCC connections. I will appreciate your urgent reply.

Regards

Add a mangle rule in the top of your rules:

/ip firwall mangle add chain=prerouting protocol=gre in-interface=lan action=accept

With this rule your gre traffic is not forced to route through wan interface.


sent from my mobile phone using tapatalk