Localhost unable to browse remote VPN client

Hi, Kang Soh, and welcome to the UTM Community!

 I haven't tried the following, but I think it might work.  Assuming the Remote device is signed into PPTP as "NAS,"

1. On the Internal Interface, define an Additional Address "NAS Device" as a /32 
2. Create a NAT rule with automatic firewall rules:
   • DNAT : Any -> Any -> Internal [NAS Device] (Address) : to NAS (User Network)

Now, when the NAS device is connected to PPTP Remote Access, you should be able to connect via the Additional Address.

Did that work?

Cheers - Bob

Hi Bob,

Thanks for the help- I did try as you suggested, but unfortunately I'm still running into the same error/issue.

The log file still shows the same error when I try to do anything other than ping the host. I don't know why ICMP packets get routed/through, but others don't.

Any other ideas would be appreciated.

Thank you

Probably some kind of masquerading rule is missing. Are you masquerading pptp to your internal network?

Sorry, seems trivial, but you are in good hands with Bob.

Might be worth trying, however I did not set it up as I thought that IP masquerading was only required if I wanted the VPN client to be able to use the LAN's gateway for internet traffic?

I'll can give it a shot however....

Thanks!

Please show us the Edit of your NAT rule.

Cheers - Bob
PS Bill, if a masq rule is required, it's an indication of a misconfiguration elsewhere - nothing wrong with a bandaid though!

Hi Bob,

I think this is what you're asking to see-

• status switch (status) = 1
• group (group) = empty value
• traffic source (source) = any address object "Any"
• traffic service (service) = any service object "Any"
• traffic destination (destination) = interface address object "External- Comcast (WAN) [PPTP Test] (Address)"
• destination address (destination_nat_address) = user or group network object "remotebackup (User Network)"
• destination service (destination_nat_service) = empty value
• source address (source_nat_address) = empty value
• source service (source_nat_service) = empty value
• log switch (log) = 0
• auto-packetfilter rule switch (auto_pfrule) = 1
• comment (comment) = empty value
• apply to IPsec switch (ipsec) = 0

If it isn't what you need, please let me know and I'll try again to get the information.

For what it's worth, I did have a couple hour phone call with tech support today, and they basically said at the end of it that they couldn't figure it out, so I'm not holding out much hope, but your continued efforts at assistance are appreciated.

Thanks!

There's the problem:

traffic destination (destination) = interface address object "External- Comcast (WAN) [PPTP Test] (Address)"

That should be on the Internal interface, not the External.  The external IP is not a part of your PPTP tunnel.

Cheers - Bob