USG60 L2TP over IPsec VPN working fine, but can´t connet to a vnc server

Options
Hakandenende
Hakandenende Posts: 8 image  Freshman Member
First Comment Seventh Anniversary
edited April 2021 in Security

Hi, USG60 configured with L2TP over IPsec vpn is working fine. On the inside there´s 5 vnc servers. It´s possible to connet to one of them (a usal pc with Tigth VNC) . The other 4 are milking robots (!) with internal vnc servers. Sitting on the real inside its no problem conneting but if the connetions are made throu VPN the vnc servers don´t respond. I guess the internal config of the vnc servers are set to only respond to connections from the same subnet and the vnc servers are looked so I can´t change this. IP of the servers are 192.168.168.x and the tunnel IP 192.168.100.100 -110.

Is there a way to come around this?

All Replies

  • Zyxel_Jerry
    Zyxel_Jerry Posts: 1,406 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 50 Answers 1000 Comments
    Options

    Hi @Hakandenende

    If the VNC server only can notify the same subnet,

    Add policy route and setup SNAT.

    Below is the example of Policy Route settings

    Go to Configuration > Network > Routing > Policy Route > Add 

    image001.png

    Incoming : tunnel

    Member : L2TP tunnel

    Source address: 192.168.100.100-110 

    Destination address : 192.168.168.X  

    SNAT : 192.168.168.100-110  

    image002.png


Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）