USG FLEX 200H SSL VPN issue

OWB

We use SSL VPN for user remote access.

Our infrastructure is mixed, some resources (servers) reside locally, and some at our host. Local and host environment is connected with an IPSec site to site VPN.

The issue is that when connected with SSL VPN, local servers are not accessible. When doing a ping test from the client PC, I receive answers from servers located at the host, but not servers located locally. It doesn’t matter if I use IP or FQDN.

The SSL VPN connection is set up with local networks only (split tunnel).

192.168.150.0/24 - the host environment from which I receive answer
172.20.10.0/24 - the local environment from which I do not receive answer.

IP address pool for VPN connection is setup to 172.20.10.80/28

I'm very in doubt about what to try to solve.

Any suggestions on what to try?.

Best regards Ole.

PeterUK

Can you setup the IP address pool for VPN connection to like 10.255.0.0/28

As you have 172.20.10.0/24 and  172.20.10.80/28 may cause a problem

As when SSL VPN for user with like 172.20.10.81 try to connect to a server like 172.20.10.10 the server in a /24 will think 172.20.10.81 is in its ARP range so it never sends to the gateway

PeterUK

Can you setup the IP address pool for VPN connection to like 10.255.0.0/28

As you have 172.20.10.0/24 and  172.20.10.80/28 may cause a problem

As when SSL VPN for user with like 172.20.10.81 try to connect to a server like 172.20.10.10 the server in a /24 will think 172.20.10.81 is in its ARP range so it never sends to the gateway

OWB

Thank you, Peter, I will try that.

I agree that the solution is not a textbook example, though we did use that setup on a VPN100 before the USG FLEX 200H upgrade without any known issues.

OWB

Hi Peter,

Problem solved, thanks a lot.

Have a nice summer.

/Ole