OpenVPN Router (as a client) behind NSG

MarkSL
MarkSL Posts: 26  Freshman Member
First Answer First Comment Friend Collector Fifth Anniversary
edited April 2021 in Nebula
We have a client that needs access to a hosted server within AWS. We do not manage that server. Their solution for server access via RDP is using an OpenVPN router (Router with built-in OpenVPN client) behind whatever primary router is in place. They suggest Sonicwall if the client does not have a business class router. We are trying to stay with the NSG already in place.

Has anyone used a setup like this with an NSG and if so, what is the basic configuration you have in place for this to work?

Thanks in advance for any information.

All Replies

  • Zyxel_Chris
    Zyxel_Chris Posts: 705  Zyxel Employee
    Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 50 Answers
    Hello @MarkSL
    If their OpenVPN router is located behind the NSG as the initiator role then I don't think NSG need the additional setting.

  • MarkSL
    MarkSL Posts: 26  Freshman Member
    First Answer First Comment Friend Collector Fifth Anniversary
    Chris,

    The primary firewall runs the primary subnet for the network that all users and devices are on. The OpenVPN router is just connected so traffic can be routed through it.
  • MarkSL
    MarkSL Posts: 26  Freshman Member
    First Answer First Comment Friend Collector Fifth Anniversary
    I would really like to work with support to see if we can duplicate the setup that the client is using in their network. If not, this client will be getting a new Sonicwall. I have test hardware in place that we can share access with to show how this is working.

    Thanks
  • Zyxel_Chris
    Zyxel_Chris Posts: 705  Zyxel Employee
    Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 50 Answers
    I assume the OpenVPN router is using site2site VPN? If it is the case then please also configure the port forwarding in virtual server, UDP500 and 4500.

    If still not work, then please enable the support request in Nebula, Help and provide the org. and site name for me. :)

  • MarkSL
    MarkSL Posts: 26  Freshman Member
    First Answer First Comment Friend Collector Fifth Anniversary
    I am not sure I am explaining this right from your response. We may have already wasted to much time and lost that sale.
  • Zyxel_Chris
    Zyxel_Chris Posts: 705  Zyxel Employee
    Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 50 Answers
    Sorry to hear that, what I mean in previous message is if both sites (OpenVPN router and AWS) are using site2site VPN, since OpenVPN router is located behind the NSG should configure the port forwarding on it then can redirect the AWS. Like following screenshot.

    Please private message me if still has the chance on this case and I will suggest to go on the ticket channel in Nebula if have the similar case in future.

Categories

Nebula Tips & Tricks


    Read more

    Nebula Help Center

    EnglishTiếng ViệtРусскийไทย中文（台灣）