This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Bit stuck here with SSL VPN - any ideas?

Hi,

we have a remote router that constantly changes it's IP ie it has a dynamic IP. We can't get a static IP for this router as the network it is on doesn't provide them. We can't change either so we are stuck with a dynamic IP.

We need to get to the devices on the LAN behind this router. Those IP's we are in control of. So a VPN might suit us with this.

IPsec we can get connected (using respond only on the UTM and just what we are after...) Problem is, the VPN can drop (when the WAN IP changes and the UTM doesn't delete the route quick enough and if the VPN comes back up before the UTM deletes the route, it won't connect due to the route being in place.

So, we looked at moving to SSL VPN and we can't get a site to site SSL VPN running but can get an SSL VPN client connected (remote access) which is assigned an IP from the virtual pool on the UTM. We can get to that IP (UTM Virtual IP assigned to router) but we can't get to the LAN behind it eg 192.168.101.0/24

It would be better if we could get a site to site SSL VPN but the remote router is not a UTM  and we've tried a fait bit to get a site to site up but it won't authenticate. I've used the certs with the apc file but that doesn't appear to work.

Anybody any idea on how to acheive this?



This thread was automatically locked due to age.
Parents Reply Children
No Data