topic Re: VPN rules for domain (AD) machine in General Topics

VPN rules for domain (AD) machine

Herman — Mon, 30 Aug 2021 08:08:36 GMT

Hello community,

i will be glad to help, there are the following rules for RA VPN (rule 34):

It is necessary that computers in the domain match rule 34.1, but this does not always happen, connections matches in 34.2 and skip 34.1. Why is this happening?

Thank you in advance.

Re: VPN rules for domain (AD) machine

Albin — Mon, 30 Aug 2021 10:48:11 GMT

Verify that the users are found in the VPN_AD_Machines group. Otherwise you need to fix that.

Are you using the same AU object for both access roles? The Access roles are AU-dependant, meaning you should use the AU object in your access role which is the same that authenticates the user on the GW object, otherwise the GW can't do lookups toward the AU.

Re: VPN rules for domain (AD) machine

Herman — Mon, 30 Aug 2021 11:23:24 GMT

Im sorry, but what you mean as "AU"? Its typo and keep in mind "Organization unit"?

Re: VPN rules for domain (AD) machine

Albin — Mon, 30 Aug 2021 11:24:58 GMT

Account unit, The LDAP object which is used to query user/group memberships.