This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VPN to Subnets & Remote Webadmin?

Noobie!
Currently have a ASG110 and ASG220 in production. The branch office using the 110 can access all of the subnets behind the 220. I can run webadmin on the 110 from either of the subnets behind the 220. They were installed by a vendor.

You would think I should be able to duplicate that scenario with a new ASG120 that I am setting up for a new branch office.

I am missing something.

I have the vpn established. From the 120 network I can access resources on the primary subnet behind the 220. The SA to the second subnet however shows no connection.

Also, I have added the 220's local subnet to Webadmin access rights on the 120, but it will not open.

This thread was automatically locked due to age.

Parents

0 mrainey over 17 years ago

I looked at it 5 times and still somehow failed to add the second local subnet to the ipsec configuration on the 220. So now both SA's are green and all subnets are communicating.

I still can't open webadmin on the 120 from the 220 side.
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 17 years ago in reply to mrainey

add the remote subnet to the allowed networks list for Webadmin...

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel
0 mrainey over 17 years ago in reply to BrucekConvergent

Yeah, I checked that, all of the remote subnets are included in Webadmin, Access Control.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 mrainey over 17 years ago in reply to BrucekConvergent

Yeah, I checked that, all of the remote subnets are included in Webadmin, Access Control.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 mrainey over 17 years ago in reply to mrainey

So I opened a support case from Astaro and they got on the 120 remotely so we figured the problem had to be from the 220 side. The tech looked at it a long time without seeing a problem. It was escalated to a "Senior Engineer" who suggested remote Webadmin over a VPN never worked and was surprised when I said I had it working all the time to my 110. So they said they would open a ticket with support in Germany. In the meantime, I noticed that there was a packet filter rule that said allow any any https.
It was in position 10. Just for fun I moved it to position 1 and suddenly I could run webadmin from all of my subnets.
Cancel
Vote Up 0 Vote Down

Cancel
0 mrainey over 17 years ago in reply to mrainey

OK, so I finally figured out the real reason for my problems with webadmin from the home subnet. I had mistakenly bound the remote gateway to the external interface. When I change it to any, all connection problems cleared up.
Cancel
Vote Up 0 Vote Down

Cancel