I have my SSLVPN set up, and users can connect remotely, accessing all allowed LAN resources. They can ping internal devices from the VPN as well. The problem is outbound routing. From the LAN, when I try to ping a machine connected to the VPN, it doesn't work. Ping is allowed for the VPN zone in System > Administration > Device Access. Logs show that the connection is allowed by firewall rules, however, the firewall rule referenced by the log is talking about LAN to WAN, not LAN to VPN. I have created a LAN to VPN rule, but it is not being recognized, even though it is much higher in the list than the LAN to WAN rule. I tried creating a policy route to force LAN traffic to the VPN gateway, but that doesn't seem to have any effect.
What am I missing? How do I get pings to go from LAN to VPN, instead of trying to go out to the internet?
This thread was automatically locked due to age.
