how to create a VPN between local computers with different network subnets?

Why not use a Site-to-Site tunnel instead of Remote Access?

Cheers - Bob

thank you for you comment, but,

how can the site-to-site solution help me?

i am afraid i am not too familiar with site to site with only one sophos

The "Remote Computer" should be able to access the "Resources" with just a firewall rule in the UTM.  Have you tried that?

Cheers - Bob

[:|] how can i do that? [:|]

P.S.

I am a little bit of a noob when it comes to firewalls (and Sophos) [:$]

Please show a picture of the Interfaces on the 'Interfaces' tab in 'Interfaces & Routing'.

Cheers - Bob

Here you go:

the interface tab

External Settings:

Internal Settings:

I don't see 192.168.1.1 on your network diagram - is that the IP on ESXi instead of 192.168.1.2?

Cheers - Bob

192.168.1.1 is the IP of my modem/router, the IP that the ESXi has is 192.168.1.2,

the IP of my WAN port of the sophos is 192.168.1.3 (it's D.G. is the router),

the IP of my LAN port of the sophos is 192.168.2.1

There are two ways to allow the 192.168.2.0/24 network to access devices on 192.168.1.0/24:

1. Make a masquerading rule 'Internal (Network) -> External'.
2. In the "Modem & Router" device, add a gateway route '192.168.2.0/24 via 192.168.1.3'

I assume that you have a Firewall rule already in place like 'Internal (Network) -> Any -> Any : Allow'.  If not, show a picture of the Firewall tab so we can see which rules you have.  I also assume that the default gateway for all of the devices in 192.168.1.0/24 is 192.168.1.1.

My preference is the second solution since it does not require double-NAT for traffic 'Internal (Network) -> Internet'.

Cheers - Bob

Well, you are correct in your assumption that i had made the Internal->External Rule, but only to give internet access to my VM computers.

Unfortunately, my modem/router is a dumb device (and i have no room for an external router, believe me, i wish i had)

i only wish to have a single computer that will have access to the resource, without giving all the VM's access, i did not include it, but i have 3 more VM machines that I do not want them to have access to my own network (192.168.1.0/24).

OK, an unusual approach might be just the ticket...

For all of the devices on the .1. network, set their default gateway to the .1.3 IP of the UTM and then leave the UTM as the only device with a default gateway pointing at your router-modem. Then the .2. network should have a firewall rule allowing traffic to the Internet, not to All.  Make another firewall rule that allows traffic from the remote computer to the resources.

Cheers - Bob

I managed to create the firewall rule and get the connection :)

thank you very much Bob :)

I managed to create the firewall rule and get the connection :)

thank you very much Bob :)