This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Missing default GW - SSL VPN for WLAN access

hi all,

i would like use the SSL-VPN to connect our notebooks via unencrypted WLAN.
i configured the 192.168.160.0/24 on eth2 with DHCP from the ASG.
default GW is 192.168.160.254=ASG.
the AP is connected directly to eth2.

When i connect via SSL-VPN to the ASG i can reach the local subnet as wanted, but i can't connect to the internet because the default-GW still points to the 160.0-net, wich has no connection the any other net.

How can i set the Default GW to the SSL-VPN Connection, so that i can reach the Internet through SSL-VPN?

My Config:
ASG220 7.005
SSL-VPN for Road Warrior works fine

Config on eth2 for unencrypted WLAN:
DHCP-Range:192.168.160.1-100
DNS:192.168.160.254
GW:192.168.160.254

Thanks for Help.

Oliver

This thread was automatically locked due to age.

Parents

0 Scott_Klassen over 18 years ago

I'm just guessing here, since I haven't played much with the VPN yet. Have you tried setting a MASQ rule of VPN Pool (SSL) --> Internal network? That should allow your VPN clients to do anything that an internal client would be able to do if I understand it correctly.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 miami_01 over 18 years ago in reply to Scott_Klassen

Hello Scott,

i configured the masquerading like you said, but i'm still not able to go to the internet.

Any other suggestions?

thanks

Oliver
Cancel
Vote Up 0 Vote Down

Cancel
0 SilverOne over 18 years ago in reply to miami_01

Miami,

Do you have Packet filter rules to allow that direction (WAN)?
What is the DNS adress for the WLAN users, and your LAN users (your firewall?)
What are the settings of your AP? can you ping a dns address on the internet from your AP?
What are the rules (packet filter) for internal lan/ WLAN users
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 SilverOne over 18 years ago in reply to miami_01

Miami,

Do you have Packet filter rules to allow that direction (WAN)?
What is the DNS adress for the WLAN users, and your LAN users (your firewall?)
What are the settings of your AP? can you ping a dns address on the internet from your AP?
What are the rules (packet filter) for internal lan/ WLAN users
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data