topic Re: Unable to connect to VPN in SASE and Remote Access

Unable to connect to VPN

TK8867 — Mon, 30 Sep 2024 09:25:14 GMT

Hello

Please help me.

The version is R81.20. I would like to implement a VPN connection to the external interface of the firewall.

However, there are two external interfaces for VPN. Static routes and default routes have been set on the firewall,

and when I make a VPN connection this time, I would like packets to return according to the static route.

However, since the packets return according to the default route, the VPN connection is interrupted after a few tens of seconds.

In this case, how should I set it up to communicate correctly? I do not want to change the static route and default route settings.

Re: Unable to connect to VPN

PhoneBoy — Mon, 30 Sep 2024 14:15:17 GMT

What kind of VPN: Remote Access or Site to Site?
Either way, this involves the Link Selection setting in the relevant gateway object.
By default, VPN will use the Main IP of the gateway (configured in the General tab of the relevant gateway object).

Re: Unable to connect to VPN

TK8867 — Mon, 30 Sep 2024 14:47:30 GMT

Thanks for your reply.

This is about remote access.

I can communicate over VPN. However, after a few seconds, it keeps reconnecting, disconnecting, and reconnecting. Is this related to link selection?

The VPN site address is set to the external interface, and the gateway address is set to the internal address, which is the main address of the firewall.

Re: Unable to connect to VPN

PhoneBoy — Mon, 30 Sep 2024 15:54:32 GMT

Very likely related to Link Selection, yes.

Re: Unable to connect to VPN

TK8867 — Mon, 30 Sep 2024 22:32:06 GMT

Thanks for your reply, but no matter how I set the link selection it made any difference.

Re: Unable to connect to VPN

PhoneBoy — Wed, 02 Oct 2024 14:37:27 GMT

What precise settings were tried?
This setting is likely necessary here as well: