We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

How to Create Access Rules for Site-to-Site VPN Access

  • Last updated on

After configuring a VPN tunnel between two Barracuda NextGen F-Series Firewalls, you must create a Pass access rule on both systems to allow traffic through the VPN tunnel.

Create this access rule on both local and remote F-Series Firewalls.

Before You Begin

Create an Access Rule Allowing Traffic in and out of the VPN Tunnels

  1. Go to CONFIGURATION > Configuration Tree > Box > Virtual Servers > your virtual server > Assigned Services > Firewall > Forwarding Rules.
  2. Click Lock.
  3. Right click on the ruleset and select New. The New Rule window opens.
  4. Enter a Name. E.g., LAN-2-VPN-SITE
  5. Right-click the rule set and select New > Rule to create an access rule to match the VPN traffic:
    • Action – Select Pass.
    • Bi-Directional – Select the check box to apply the rule in both directions.
    • Source – Enter all local networks used for the VPN tunnel. 
    • Service – Select the services allowed to access the tunnel. Default: Any
    • Destination – Enter the remote networks behind the VPN tunnel, or select VPN_Networks
    • Connection Method – Select Original Source IP
  6. Click OK.
  7. Reorder the access rule by dragging it to the correct position in the forward firewall's ruleset. Make sure no access rule placed above it will match the traffic for the site-to-site access rule.
  8. Click Send Changes and Activate.
Last updated on