topic RemoteAccess and S2S in SASE and Remote Access

RemoteAccess and S2S

Daniel_Hainich — Tue, 21 Apr 2020 12:47:39 GMT

Hello, iam running R80.20 and want to grant my remote-access users access to ressources behind an 2S2-Vpn. my internal-users have access and its working. internal users are hidden behind gateway. traffic for my remote-access users is dropped, so i added an access-rule for these users and created an hide-nat-rule. but its not working. any ideas?

daniel

Re: RemoteAccess and S2S

G_W_Albrecht — Tue, 21 Apr 2020 13:37:36 GMT

I think you need a VPN client Encryption Domain, containing all nets that should be accessible. Go into Gateway > Network Management > VPN Domain > Set specific VPN Domain for GW Communities > Select the RA Community > Set > User Defined select a Network group created for this purpose.

Re: RemoteAccess and S2S

PhoneBoy — Tue, 21 Apr 2020 18:29:05 GMT

In addition you may want to configure IP Pool NAT instead of a HIDE NAT rule as it was designed explicitly for this purpose.

Re: RemoteAccess and S2S

Daniel_Hainich — Wed, 22 Apr 2020 06:38:40 GMT

thanks, problem is solved. now i have to look for IP Pool NAT. 🙂