Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 455 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ASG7: PPTP-VPN packet filter issue with internal networks

Wolfpack
Hello everybody,

I got a big problem since the last ASG7 update (7.502).

VPN clients can connect to the ASG sucessfully but can't contact internal network clients. As far as I determined, all packets are now stuck in the packet filter and/or aren't routed correct:
16:55:48  Default DROP  UDP 
10.34.146.176  :  137
→ 
10.11.12.13  :  137

len=78  ttl=127  tos=0x00  srcmac=00:a1:b0:10:a0:4b  dstmac=00:00:00:00:00:00

...repeating itself over and over again.
10.34.146.176 is the 3G-connection-IP

Pinging the firewall works, I can also log in to the webinterface (Administration from outside is diabled, so I'm definitly IN the local network).
Ping/traceroute to the exchange server 192.168.3.100 leads me sucessfully to 10.242.1.1 (VPN-Gateway?!?!?) and after that only timeouts!

I heard about updates concerning the packet filter rules but couldn't find a solution.

Maybe somebody could help me out with the fitting rule(s)?

Network:
ASG7 local IP: 192.168.3.1
VPN-Remote-IP 192.168.3.112-114
Local clients: 192.168.3.1-100
Current (single) rule in packet filter: internal (network) [192.168.3.0/24]-> ANY -> ANY


This thread was automatically locked due to age.
  • 0
    Well, I helped myself and as I far as I can see: it works!

    1. Changed VPN-Remote-IPs back to VPN-PPTP-IP-Pool
    2. Created a new packet filter rule VPN-PPTP-IP-Pool => ANY => ANY

    Still got problem to reach VPN-clients from the local subnet (ping), but the main applications are back on work.