Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 3 replies
  • Subscribers 28 subscribers
  • Views 11024 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Open SSL VPN - Access local server - Wrong IP

Marco Pangritz

Hi guys,

I'm new in configurating XG Firewall. I use the XG85W.

 

I've configured Open SSL VPN based on the tutorial https://community.sophos.com/products/xg-firewall/p/vpnremoteaccess.

I can connect via VPN, but I get an IP 10.20.6.X, which I've set in VPN Settings, and don't reach my internal resources, which based on 10.20.5.X.

My #Port 1 LAN is configured to 10.20.5.1/255.255.255.0

If I want to assig the IPv4 Lease Range to 10.20.5.100 - 10.20.5.120 under VPN => "Show VPN Settings" the firewall disallow and throws "Network with the same IP address as start lease IP already exits choose diferent IP address".

How can I reach my internal network to access Servers?
What I'm doing wrong?

Regards

Marco



This thread was automatically locked due to age.
Parents
  • +1

    I found the how to video inadequate in explaining how to setup SSL VPN for remote access so I wrote my own guide which you can find here:

    Did you create an IP Host for your local subnet and add that to your SSL VPN permitted network resources? The system created IP Hosts that are created (i.e. #Port1) are setup for the interface/port IP address and not the local subnet.

    I also created another IP Host for the VPN IP range such that I can limit the scope of IP addresses the VPN firewall rule applies to.

Reply
  • +1

    I found the how to video inadequate in explaining how to setup SSL VPN for remote access so I wrote my own guide which you can find here:

    Did you create an IP Host for your local subnet and add that to your SSL VPN permitted network resources? The system created IP Hosts that are created (i.e. #Port1) are setup for the interface/port IP address and not the local subnet.

    I also created another IP Host for the VPN IP range such that I can limit the scope of IP addresses the VPN firewall rule applies to.

Children