Reaching other subnet from VPN over RED

Hi Helmut,

No problem. Define remote networks (REDs - they should be different) and add them to the sslVPN remote access definition as "Permitted network resources (IPv4)". Define the network firewall rule: source VPN any, destination LAN + RED1 + RED2 any any, match known users - you. It should work.

Regards
Jan

Hi Jan ,

So i have 2 Reds : Red1 and Red2

i have placed them into the SSLvpn config on permited network resources

On the firewall rule i've have ad  on Destination Zone : RED (dont find red1 and red2 )

match known users is not cheked.

But no Change :-(

tnx

Helmut

Ok, for RED operation mode = Standard / unified it should work.
If you have RED operation mode = standard / split then select NAT & routing / Rewrite source address (masquerading) MASQ in the firewall rule. Maybe it will help. I have the first case and communication works.

Regards
Jan

hmm

Red mode is unified , so its the same

but won't work

Does the sslVPN configuration file (xx.ovpn) on your computer contain:
remote 10.0.0.1 8443
remote 10.10.0.1 8443
remote 10.20.0.1 8443    or something similar?
After changing the sslVPN configuration on the firewall, you must download the configuration again and install it on your computer.
I suggest enabling NAT & routing / Rewrite source address (masquerading) MASQ regardless of the RED mode.

Regards
Jan

Does the sslVPN configuration file (xx.ovpn) on your computer contain:
remote 10.0.0.1 8443
remote 10.10.0.1 8443
remote 10.20.0.1 8443    or something similar?
After changing the sslVPN configuration on the firewall, you must download the configuration again and install it on your computer.
I suggest enabling NAT & routing / Rewrite source address (masquerading) MASQ regardless of the RED mode.

Regards
Jan

this is in the config file

must be a routing issue

when i ping my firewall on 10.0.0.1 i got respons

when i go the the UI with the ip adress : 4444 no response