Third party VPN and local internet breakout

[Stefan_Zuber]

Hello,

we need to build a third party VPN to Zscaler and allow only some subnets to route over there via 0.0.0.0/0. Other subnets should be routed via WAN default-route for direct internet access without Zscaler. Is there a way to configure this setup? Source based routing is not possible for 3rd party VPN's.

Any ideas?

Many thanks!

[alemabrahao]

Maybe it can help you:

https://documentation.meraki.com/MX/Site-to-site_VPN/Tag-Based_IPsec_VPN_Failover