This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN with Port Forwarding

We are in the process of migrating our remote clients that use RDP to one of our internal server using port forwarding by ISA server,

we want to migrate these users one at a time to SSL-VPN and have the port forwarding enabled at the same time untill we migrated all the users, My question is it is possible to enabled SSL-VPN and DNAT port forwarding to one of our internal server at the same external link with static IP? we have also mutliple link so we need to add or change some config. in multipath rule?

SSL-VPN Remote users --->EXT LINKA ---> ASG 425 ---> internal network
Remote Users (RDP 3389)---> EXT LINK A ---> ASG 425 ---> Internal Terminal ServerA ( port 3389)

we are using ASG 425 with up to date version

Thanks in advance

This thread was automatically locked due to age.

0 BarryG over 14 years ago

Hi,

I think you are asking if you can
1. have a DNAT on the Astaro for port 3389
and
2. have a VPN connection on the Astaro, and have users connect into the internal network, also on 3389

If so, since the DNAT is on the EXT interface, VPN traffic will bypass the DNAT and would be able to connect directly to the server.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 aldahan over 14 years ago in reply to BarryG

Hi,

I think you are asking if you can
1. have a DNAT on the Astaro for port 3389
and
2. have a VPN connection on the Astaro, and have users connect into the internal network, also on 3389

If so, since the DNAT is on the EXT interface, VPN traffic will bypass the DNAT and would be able to connect directly to the server.

Barry

Hello,
You are right, I did the DNAT port forwarding rule and configured the default for SSL-VPN, it is working fine.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel