Client VPN don´t ping any local IP

[Vincent]

Hello,

The VPN client connects and authenticates against the active Directory correctly, but then is unable to access any IP of the local network (or the local IP of the MX64).

The local network has the range 192.168.1.0 / 24 and the VPN network is in the range 192.168.6.0/24

In the VPN client, I do not observe any route to the 192.168.1.0 network and the packages exit through the gateway to the Internet (logical that they do not arrive).

Any idea?

Regards

[Mr_IT_Guy]

Good morning @Vincent ,

First question I have to ask, under Security & SD-WAN>Configure>Site-to-site VPN, you should see a list of your local networks attacked to the MX64. On your Client VPN, do you have YES selected under the Use VPN column?

[Vincent]

Hello @Mr_IT_Guy 

Site to site is Off. The list of LAN attached are seen under Addressing and VLANS. The VPN is client to VPN server.

Regards

[Nick]

Hi Vincent,

What os is the client? 

If you are using macOS you must ensure you tunnel all traffic through the VPN for it to work correctly. Under advanced as per this screenshot 🙂 

Do you have any firewall rules in place?

[BrechtSchamp]

Probably not as you said the traffic is passing to the gateway, but I want to make sure anyway. The host network the client is in isn't 192.168.1.0/24 too, is it? As that could cause problems when trying to reach devices in that network.

192.168.1.0/24 is probably the most used subnet in the world so sooner or later this would cause issues.

[Nick]

Ah I misread that as meaning something else.

I would agree that a change of subnet would be ideal if you can

[Vincent]

Hi Nick

Client is Windows 10 and I probe with the 2 options and the result was the same

[Vincent]

I have a rule that allows all traffic from the VPN network 192.168.6.0 to the internal network 192.168.1.0

The range of the client IP is 192.168.4.0

Thanks

[Nick]

Its not the Windows firewall getting in the way is it?

[Vincent]

Hi Nick

Under Addressing & VLAN I have

Under Client VPN ...

Under Firewall ..

At the client PC once connected ..

I don´t know what IP is 192.0.2.1 and logically as DNS server is of LAN remote  don´t resolve any name.

Regards

[Boyan]

Hi Vincent,

I am wondering if you have found a solution to this problem, as I am experiencing the same issue?

[Vincent]

Hello,

The requisite is check the option at client VPN configuration of Route all traffic over remote network and that remote machines have the gateway the MX.

Regards

[ROCO]

This fixed my issue. Thank you Nick!

[Nick · Accepted solution]

Excellent news!

If you can tick the solution complete that will help others find the thread if they have issues 👍🏻

[IAMTLOG]

This worked for me.

[macabi62]

i have the same problem, help me please

[Nick]

It might be best to make a new thread (feel free to link it here) with your specific issue and problems so we can see if we can help

[macabi62]

I solved the  problem with the steps that you shared here, thank you.

[Nick]

Great - glad it helped!