Configuring Overlay Routes
Access Gate relies on routing to steer overlay traffic through the appliance while keeping the existing network (underlay) unchanged. This requires a small number of explicit routes on the router and a gateway configuration on Access Gate.
Configure Routes on the Router
Add routes so that overlay traffic is sent to Access Gate:
# Route overlay network through Access Gate
ip route add 100.64.0.0/16 via <access-gate-ip> # Overlay network
ip route add 100.65.0.6/29 via <access-gate-ip> # Access Gate interface
These routes ensure that any traffic destined for overlay IPs is forwarded to Access Gate.
Configure Access Gate Overlay Interface
In the Access Gate UI, on the overlay port:
- IP address: 100.65.0.6/29
- Gateway: 100.65.0.1
This allows Access Gate to send proxied traffic back to the underlay network via the existing router.
Resulting Traffic Flow
With these routes in place:
- Clients send traffic to overlay IPs
- The router forwards that traffic to Access Gate
- Access Gate enforces policy and proxies traffic to the underlay destination
No VLAN changes or IP reassignments are required.