Auto VPN

[Ubaidkhan]

Hi All,

I am creating auto VPN between to MX appliances as VPN established but it disable internet traffic. When VPN disable/off internet traffic is enable and devices can access VPN. please guide.

[DarrenOC · Accepted solution]

Hi @Ubaidkhan , can you provide a bit more info on your setup?  What is the purpose of the auto-vpn? What resources are your users trying to access either side of the vpn? Are you placing all VLANs in the vpn? When you enable the vpn what traffic are you seeing on your wireshark traces (LAN and Internet)?

[Ubaidkhan]

Hi @DarrenOC i have two MX devices in two different countries. one in pak and other is in dubai My concern is to connect these two devices through auto VPN to access ERP application from pakistan. and internet also work on client machine through which i am access ERP. 

Auto VPN is established and user can access ERP but he is not accessing to internet. 

i hope u get my point and if not let me know 

thanks 

[DarrenOC]

Hi @Ubaidkhan , is there an upstream firewall in Dubai? This is probably not aware of your IP subnets in Pakistan and is also probably blocking the internet traffic from that site.  Do you have access to that firewall to investigate?

[Ubaidkhan]

no there is no other firewall in Dubai. just there is MX firewall through we are managing over network in Dubai

[DarrenOC]

Any chance you could provide a rough network diagram incl the subnets in question?

[Ubaidkhan]

@DarrenOC thanks for responses. Issue resolved. 

[DarrenOC]

Hi @Ubaidkhan , what did you do to resolve?

[Ubaidkhan]

As client is obtaining IP from DHCP server and obtaining an IP address from reserve IPs and I restart services of DHCP server and after that is obtain IP address from range which are allowed.

After that i have configure auto VPN Hub to Hub and then user can access internet.

[Ubaidkhan]

These two things i have done. 

[DarrenOC]

So you had an IP conflict? But then surely the ERP traffic would have failed as well?

Glad to hear the issue is resolved.

See you in 2022

[Ubaidkhan]

no i don't think that it is an IP confliction as there is only one device is connected with MX.  yes if it is IP conflict then ERP traffic also failed but ERP is accessible. as device is not in production environment just doing testing to take this device in production. 

According to my understanding, it is an DHCP error when i restart the services and release ip address from client machine issue is resolved. 

before this i have just reconfigure VPN. thanks for you support buddy. god bless you