Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 3 subscribers
  • Views 2102 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPsec VPN from any IP (client to gateway)

seb
I want to be able to setup an IPsec tunnel from any host to ASL.

Currently I've got it working with a fixed client IP-adres usings IP-adres a.b.c.d with subnetmask 255.255.255.255

I've tried using a host with 0.0.0.0/255.255.255.255 but this doesn't work.

Any suggestions?


This thread was automatically locked due to age.
  • 0
    Oke, Ive made some progress:>

    When I use a VPN configured with a host  0.0.0.0/255.255.255.255 and a Packet Filter rule:
    - any to firewall external service IPsec ESP allow (IPsec ESP with SPI 256:65534)- :

    Im able to setup a tunnel from any Internet adress with a PGP client. BUT, client traffic is not routed to my private network.

    I think this is a rule issue, but ofcourse I don't want to allow any traffic to my private network. What im looking for is a rule:
    - any traffic coming out of the tunnel to my private network etc. etc. - Like on Checkpoints Firewall-1 

    Is there anyway to set this up?
  • 0 in reply to seb
    Hi seb, 

    this issue is fixed in the next Up2Date Package. We will announce this very soon.

    You now will be able to select 'Any' at the Remote IP select box.

    And thats it, everthing else is taken care of.

    greetings gert
  • 0 in reply to seb
    hey seb just in case you didn't know its now a working feature of ASL 1.8 (Dynamic-IP VPN Clients)

    carl
Unfiltered HTML