This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Adding outside ASG's to my ACC...

My ACC is virtualized and i am trying add ASG's from the "outside world" into my ACC.

I can get the ASG's that are on my network (VPN tunnel) into the ACC just fine.

also, for some reason one of our remote locations cannot get to the ASG at my location (inside or outside IP) (this location does not have an ASG), but the that same location can get to any other ASG.

any help would be greatly appreciated!

-J

This thread was automatically locked due to age.

0 megaposer over 16 years ago

Hi,

I am sorry but I fail to correctly understand your problem. Do you have a remote ASG which is not connected to your local network via VPN and is this ASG not able to be shown in the ACC?

Thanks,
Henning
Cancel
Vote Up 0 Vote Down

Cancel
0 James Shakour over 16 years ago in reply to megaposer

exactly!

-J
Cancel
Vote Up 0 Vote Down

Cancel
0 megaposer over 16 years ago in reply to James Shakour

Then how do you connect from this remote location to your local network? Do you have some kind of DNAT/port forwarding involved? What exactly is your network topology? Do you see some kind of violations in the packet-filter.log of the guarding ASG in your local network?
Cancel
Vote Up 0 Vote Down

Cancel
0 James Shakour over 16 years ago in reply to megaposer

yes i have a DNAT setup on my local box that points to the ACC. I do not see anything in logs pointing to my local 425.

I appreciate the help thus far.[:)]

-J
Cancel
Vote Up 0 Vote Down

Cancel
0 James Shakour over 16 years ago

can you guide me through the exact process of adding an outside, (non network) ASG to me ACC?

also i'd like to add that the ACC is setup on a virtual device.

-J
Cancel
Vote Up 0 Vote Down

Cancel
0 megaposer over 16 years ago in reply to James Shakour

Hello.

Well, all the help I can give you is that you need to ensure that you have properly setup DNAT (port forwarding) on your local network ASG.

The DNAT rule must forward traffic for port 4433 reaching the external IP of your local ASG to your internal ACC (virtualized or not does not matter). You need to align a corresponding packet-filter rule which is easily established by enabling the checkbox in the DNAT configuration.

Then you need to configure your remote ASG to connect to the external IP and port 4433 of your local ASG.

Cheers,
Henning
Cancel
Vote Up 0 Vote Down

Cancel
0 James Shakour over 16 years ago in reply to megaposer

yea thats what i have........

Jack was helping with this issue as much as he could, about 3 weeks ago, he seemed to think that the new release might fix the issue.

-J
Cancel
Vote Up 0 Vote Down

Cancel
0 megaposer over 16 years ago in reply to James Shakour

I am just curious: Who is Jack and what new release is he talking about?
Cancel
Vote Up 0 Vote Down

Cancel
0 James Shakour over 16 years ago in reply to megaposer

send me a PM

-J
Cancel
Vote Up 0 Vote Down

Cancel
0 megaposer over 16 years ago in reply to James Shakour

Hello,

did you have any luck resolving your issues with the new ACC V1.9? The manual/online-help should correctly explain how to setup your DNAT/packet-filters on your intermediary Gateway so you can enable those outside ASGs to join your internal ACC.

Regards,
Henning
Cancel
Vote Up 0 Vote Down

Cancel