Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 3 subscribers
  • Views 2704 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN: Need to set client IP address

tedflo1

Hi all,

Using UTM 9 (v9.705-3) here. I recently finished setting up SSL VPN for Mac users (newer versions of macOS and iOS had issues connecting to L2TP/IPSec), and am experiencing a little issue.

When a user connects, they are not able to establish a remote desktop connection. Our workstations use the 255.255.240.0 subnet. 

When using the L2TP/IPSec connection method, I am able to specify an IP address ("RAS Address") for each user that needed it. Is there a way to do this for SSL VPN?

 



This thread was automatically locked due to age.
Parents
  • 0

    Hi Ted and welcome to the UTM Community!

    No, not possible for the SSL VPN.

    I suspect that your internal devices have active firewalls that block IPs outside your local subnet - disabling the firewall on a test machine would confirm that.

    If you don't want to disable firewalls on internal devices, you could simply SNAT RDP traffic from "Internal (Address)."

    If you search here, you will find the modification needed to let L2TP/IPsec work with the newer versions of Apple OS.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0

    Hi Ted and welcome to the UTM Community!

    No, not possible for the SSL VPN.

    I suspect that your internal devices have active firewalls that block IPs outside your local subnet - disabling the firewall on a test machine would confirm that.

    If you don't want to disable firewalls on internal devices, you could simply SNAT RDP traffic from "Internal (Address)."

    If you search here, you will find the modification needed to let L2TP/IPsec work with the newer versions of Apple OS.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
Unfiltered HTML