Hello all --
We have two internet connections, each with their own set of ip addresses.
I am well aware that any services using an astaro proxy can only function through the interface configured with a default gateway. And it is my understanding that the ssl-vpn implementation is not one of these proxy-based services, and should allow connections over any configured ip address.
Previous to the 7.006 update, I was able to establish an ssl-vpn connection via either internet connection on any configured ip address, regardless of which one had the default gateway set.
After installing 7.006, I can establish an ssl-vpn connection only via the ip address that has the default gateway configured. I am currently at 7.007 and the issue still persists. And I fear that installing any further updates will completely trash my system. Astaro has confirmed to me that they do not test their up2dates thoroughly, and I have spent many, many hours fixing and rebuilding my ASG220 because of this...it is very frustrating.
Let me clarify some other details -- as with many home/office networks these days, there is usually a router of some sort connecting the client computers to the internet, which is the case here as well. With this setup, I can connect the ssl-vpn only to the astaro ip address configured with the default gateway...I cannot connect the ssl-vpn to any other configured ip address. Previous to 7.006, this was not the case. I could connect to any configured ip address on the astaro.
If I remove the home/office router from the mix, putting the client computer directly on the internet, then I can connect to the other configured astaro ip addresses. I have tried multiple home/office routers from different vendors; it is not an issue with a single router.
I read somewhere that there were some NATing issues with astaro's ipsec vpn implementation...dont know if that has been fixed or not. I am wondering if there could be a similar issue with the ssl-vpn implementation as well.
This sure seems to be a NAT-related issue since the home/office router adds an extra layer of NAT, and once that extra layer is removed, I can connect to other the other astaro ip addresses.
Anyone else experiencing a similar issue?
I have platinum support, and have asked them to assist with the issue, but they want full access to my ASG so they can connect and troubleshoot at their convenience, completely removing me from the troubleshooting process, which I deem unacceptable. It is not that I don't trust them on my unit, but I will not be allowing full access to my system unless I can monitor in case an issue arises. I have voiced these concerns to astaro support, but they are unresponsive, and then simply close the case, which again, I find completely unacceptable.
I am hoping that by posting my issues in these threads that I may actually find a solution to my problems (the ssl-vpn is not the only issue I have). It is a real shame that astaro's support process is not better than it is.
Thanks in advance to anyone that can help!
This thread was automatically locked due to age.