Problem with access to my VPN Clients to network in the subinterface wan

Hello,

What is exactly the type of Port2.100 network ? a VLAN? For which type of zone? WAN? LAN?

Hello,

It is a VLAN and zone is WAN,

Best regards.

Could you please attach a screnshot of the "Permitted network resources (IPv4)" from the SSLVPN Configuration ?

Thanks.

Hello,

Im permiting everything

Best regards.

Is your 192.168.2.0/24 network one of the 3 ressources permitted in this section?

Hello,

Yes it is the GTD,

Best regards.

Hello,

What about your firewall rule that allows the VPN traffic? Could you please share a screenshot about that ?

Thanks.

Hello,

Yes I have a rule that permite every zone to every zone with the source range network to the same destination network (192.168.0.0/24,192.168.2.0/24,10.81.234.5-55), When I do a Ping from 10.81.234.12 to 192.168.2.98 I can't even see this traffic in the event viewer.

Best regards.

Hello,

Yes I have a rule that permite every zone to every zone with the source range network to the same destination network (192.168.0.0/24,192.168.2.0/24,10.81.234.5-55), When I do a Ping from 10.81.234.12 to 192.168.2.98 I can't even see this traffic in the event viewer.

Best regards.

Hello,

Ok, I guess that because the 192.168.2.0/24 network is behind the WAN zone, you have to select the "Use as default gateway" tick in the SSL VPN settings, to allow your SSLVPN network to reach things that are behind the WAN zone.

Regards.

Hello,

I tried with this yesterday and dosn't work.

Best regards.

Hello,

I tried now on my XG and it works. Could you please try to configure it again like I suggested in the last post, and send me screenshots of your whole configuration.

Thanks.

Hello,

This is my configuration 

Best regards.

Hello,

I suggest you to create 2 separate firewall rules. 

One to allow access from the LAN/VPN/DMZ zones to LAN/VPN/DMZ zones and networks.

And another one to allow access from VPN zone and sslvpn network host, to WAN zone, any network, and check the "Rewrite source address (masquerading)" box to use MASQ.

And it should work.

Hello,

thanks this help me.

Best regards.