Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 15 replies
  • Subscribers 1 subscriber
  • Views 11780 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN: Client to Client communication

lheinemann
Dear everybody,

I have currently implemented an SSL Client VPN which works perfectly fine for my routed networks (tunnel).

I am wondering how it is possible to have the VPN IP Pool ( 10.242.2.x ) routed through the tunnel as I want to have the possibility to communicate whith each connected VPN client vice versa.

Once I add the VPN IP Pool to the Local Network group my client starts not being able to connect to the astaro gateway anymore.

Any thoughts on this ?

Thanks in advance.

Lars


This thread was automatically locked due to age.
Parents
  • 0
    Thank you, Gunawidjaja Joseph!

    I was trying to do it with SNAT, but the traffic was going into the tunnel before the SNAT could see it.  I scanned your post, and my eye fell on the words Full NAT - bingo!  I then made my SNAT into a Full NAT and was able to ping.

    That's not the first time I've used a Full NAT to solve a problem with a VPN.  I'm making myself a new rule:

     When working with VPNs, solve confusing "routing" problems with Full NATs. [:)]



    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    Thank you, Gunawidjaja Joseph!

    I was trying to do it with SNAT, but the traffic was going into the tunnel before the SNAT could see it.  I scanned your post, and my eye fell on the words Full NAT - bingo!  I then made my SNAT into a Full NAT and was able to ping.

    That's not the first time I've used a Full NAT to solve a problem with a VPN.  I'm making myself a new rule:

     When working with VPNs, solve confusing "routing" problems with Full NATs. [:)]



    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
Unfiltered HTML