Remote Access SSL - same ip network

Question

Hi, I've setup Remote Access for 2 user 
 My lan is 192.168.1.0/24 
 Everything is OK if the user network is different than mine 
 How to make it work if user network is the same as mine? 
 I searched everywhere but I did'nt found any documented solution to make it work 
 The only example I found is about to connect two UTM with the same network range ( https://support.sophos.com/support/s/article/KB-000034290?language=en_US ), but I don't know if it can be applied to my case....i tried, but no success. Can anyone help me please? 
 I created: 
 2 New Network definition: 
 FakeNetwork : 192.168.20.0/24 
 MyNetwork: 192.168.1.0/24 
 
 2 NAT 1:1 
 1:1 NAT MAP SOURCE: 
 Traffic selector: VPN Pool (SSL) -> any -> MyNetwork Source translation: FakeNetwork 
 1:1 NAT MAP DESTINATION 
 Traffic selector: FakeNetwork -> any -> VPN Pool (SSL) Destination translation: MyNetwork 
 
 Thank you for any help 
 Rudy

FormerMember · Accepted Answer

As per your query query, SSL VPN works fine for the users having a different home network than the office network. But not for the users who have same home network as office network. 
 Office network: 192.168.1.0/24 
 To provide resource access to these users, you've set up their SSL VPN profile with 'Local Networks' as fake network == 192.168.20.0/24 
 
 As per the user profile configuration when a user connects to SSL VPN, a route to 192.168.20.0/24 network will be added to the client machine. 
 To access 192.168.1.0/24 resources they need to initiate a request with a fake network. 
 ==> For example: if they'd like to RDP to 192.168.1.5 then from client machine they need initiate RDP request on fake IP 192.168.20.5 
 On UTM, you need to setup 1:1 NAT rule on top with below parameters. 
 For traffic from: SSL VPN pool Using service: ANY Going to: 192.168.20.0/24 
 1:1 NAT mode: Map destination Map to: 192.168.1.0/24 
 Automatic firewall rule: On 
 
 Hope this helps :)

Remote Access SSL - same ip network

Top Replies