topic Re: Remote Access with Multiple WAN ip addresses in SASE and Remote Access

Remote Access with Multiple WAN ip addresses

ikafka — Fri, 09 Jun 2023 13:26:45 GMT

Hi,

I have multiple WAN ip addresses. And I want to use these ip addresses for different VPN user group. I want to apply different rules to these user groups. Is this possible?

For example:
infovpn.example.com > ip addr: 212.x.x.x.10
techovpn.example.com > ip addr: 212.x.x.x.20

Thanks.

Re: Remote Access with Multiple WAN ip addresses

PhoneBoy — Fri, 09 Jun 2023 22:31:51 GMT

Why is it a requirement that different groups of users connect to a different IP address?
In any case, only one IP can be used per gateway for Link Selection currently.

Re: Remote Access with Multiple WAN ip addresses

G_W_Albrecht — Sun, 11 Jun 2023 08:52:49 GMT

Not the answer 8)

Re: Remote Access with Multiple WAN ip addresses

ikafka — Sat, 10 Jun 2023 21:17:59 GMT

Why is it requirement? I don not know. Customer policy maybe another thigns. If the WAN ip address is /30 subnet, costumer wants to use two different IP addresses from here and provide two different vpn services.

Re: Remote Access with Multiple WAN ip addresses

ikafka — Sat, 10 Jun 2023 21:20:47 GMT

I know I can do it with the rule and the group. I would not ask such a simple question to checkmates. It is a customer question and I have to answer technically. Maybe its for a competitor analysis.

Re: Remote Access with Multiple WAN ip addresses

PhoneBoy — Mon, 12 Jun 2023 16:00:33 GMT

When addressing customer challenges, it's important to fully understand the requirements, including the logic behind them.
As providing multiple IP addresses to connect to via Remote Access is not necessary to meet the customer stated requirement of providing different types of access to different groups of remote access users, we need to understand what is driving the request so we can offer the appropriate solution.

Re: Remote Access with Multiple WAN ip addresses

ikafka — Tue, 13 Jun 2023 06:51:50 GMT

We evaluated the customer requirements and proposed the best solution. We proposed different rules and access multiple methods for different user groups. We stated that there is no need for multiple IP solutions. Thank you for your support