Hi Everybody,
we want to connect a remote site to our utm (SG230). The remote site uses openvpn and we already received an ovpn file for the client connection. This works well if we connect from windows clients using the openvpn client.
I've created an apc file with the Skript "ovpn-to-apc.sh" and imported it in our utm, this worked. I also can open the tunnel and ping a remote server from the utm.
The problem is, that our clients cannot access the remote site. The problem is that I cannot (or I didn't find a way) masquerade our internal network on the utm. Also a SNAT is not possible since our utm get's a dynamic VPN Pool address from the openvpn server.
If I connect to the utm using ssh and run the following command
iptables -A POSTROUTING -t nat -o tun0 -j MASQUERADE
our client's can access the remote site.
So here is my question: Is there any way to masquerade our clients without using the above iptables entry?
Thanks and best regards
Chris
This thread was automatically locked due to age.
