Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Routing/NAT: Connect Client IPSec - XG Userportal not responding

When users connect with connect client 2.1.20 0309 they can access all configured networks but not the XG itself

So the userportal is not working and ping is also not working.

I checked with route print, that the LAN IP of the XG is routed on the client.

The userportal traffic arrives at XG but is not responded.

Traceroute to client's IPSec IP shows the traffic is routed to a static route on the XG, instead of connecting directly.

IPSec IP range: 10.242.xxx.xxx/24

That's the static route XG is following when respondig to client traffic that's designated for XG itself.

So the IPSec IP range is in that network 10.0.0.0/8

Please don't tell, I need to build SNAT like for Site-2-Site tunnel system generated traffic (KB-000035607).

like this:

set advanced-firewall sys-traffic-nat add destination 10.242.xxx.xxx netmask 255.255.255.0 snatip 172.xxx.xxx.xxx (XG's LAN IP)

Another question:

will this display ever change?

I've never seen anything here. Connections should be listed here, shouldn't they?



This thread was automatically locked due to age.
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?