topic Re: VPN routes issue in SASE and Remote Access

VPN routes issue

Jeril_Cherian — Wed, 24 Oct 2018 05:08:29 GMT

When connected to VPN ( secureclient, office mode), i'm not able to get to internal sites ( RFC private networks) when split tunneling is disabled. So, i added RFC networks to encryption domains and ended up having 300+ routes in client machine. Is there better way to make it possible ? Also why are the routes added in below fashion instead of just one /8 or /12 or /18

----

10.0.0.0 255.255.0.0 10.255.240.2 10.255.240.1 1
10.1.0.0 255.255.252.0 10.255.240.2 10.255.240.1 1
10.1.4.0 255.255.255.252 10.255.240.2 10.255.240.1 1
10.1.4.4 255.255.255.255 10.255.240.2 10.255.240.1 1
10.1.4.5 255.255.255.255 10.255.240.2 10.255.240.1 1
10.1.4.6 255.255.255.254 10.255.240.2 10.255.240.1 1
10.1.4.8 255.255.255.248 10.255.240.2 10.255.240.1 1
10.1.4.16 255.255.255.240 10.255.240.2 10.255.240.1 1
10.1.4.32 255.255.255.224 10.255.240.2 10.255.240.1 1
10.1.4.64 255.255.255.192 10.255.240.2 10.255.240.1 1
10.1.4.128 255.255.255.128 10.255.240.2 10.255.240.1 1
10.1.5.0 255.255.255.0 10.255.240.2 10.255.240.1 1
10.1.6.0 255.255.254.0 10.255.240.2 10.255.240.1 1
10.1.8.0 255.255.248.0 10.255.240.2 10.255.240.1 1
10.1.16.0 255.255.240.0 10.255.240.2 10.255.240.1 1

---

Re: VPN routes issue

G_W_Albrecht — Wed, 24 Oct 2018 08:08:24 GMT

Usually, Encryption Domain contains all internal networks behind the GW. Following the CP VPN Admin Guides for configuration, i have never encountered the issue you describe at all...

Re: VPN routes issue

Jeril_Cherian — Wed, 24 Oct 2018 09:03:58 GMT

Any idea why routes are added those ways ?

Re: VPN routes issue

G_W_Albrecht — Wed, 24 Oct 2018 11:03:05 GMT

Maybe the reason is the way you defined / added it ? Usually, all networks defined as internal are in the Encryption Domain for the site when you choose for VPN Domain to use the Topology information.