Not too certain how to set this up, so figured that I'd ask if anyone else has come across a similar config.
Our setup is as follows: We have a perimeter firewall, which goes to our Astaro 220 which is in transparent bridged mode, which then leads to our LAN. Using IPSEC VPN to our perimeter firewall from the WAN. NAT is handled by the perimeter device.
I'd like to try using the Astaro SSL VPN. I enabled the End-user portal with the allowed network being internal, and a single allowed user (for testing purposes). I also enabled Remote Access SSL, again with internal network and that single user set up.
When I logged in as that user to the end-user portal, I was given a message that SSL is not setup for that user. Now, from the beta where I played with this a little bit in a test network, I recall that it will do this until a NAT or MASQ rule is set. Since the perimeter device is handling NAT, what do I want to put in the rule for the Astaro device?
Also, I've allocated an external IP for the Astaro and had an external DNS record created for it and added a rule to my perimeter firewall to forward requests for that IP to the Astaro. Do I want to add this in Network>Interfaces>additional addresses to my br0 interface?
I'm a little conflustered with the Astaro box being in "pass-through" mode. Thanks for any advise.
This thread was automatically locked due to age.
