Guest network and mobile access on same public IP

[sys_Admin1]

Hello,

This configuration is set on R80.10 version. 

I have a guest access with NAT IP public, this access is for web access with some limitations.

But somes times, internal users as don't have access to internal network , use this guest access to connect to VPN ( this VPN is a mobile access and configured with the same public IP of guest access ), but not works. 

Checking logs I see that all traffiic is drop because anti-spoofing protection. 

Do you know it's possible to make this configuration without disable anti-spoofing protection  ? 

Thanks in advance, 

Marco 

[PhoneBoy]

A few more details are needed here.

• Is your guest network included as part of the Encryption Domain (Gateway object > Network Management > VPN Domain)
  • If you're using All IPs Behind Gateway, then it is and you should use an explicit domain definite that excludes this network.
• A screenshot of the anti-spoofing message would be exceptionally helpful along with related topology information

[sys_Admin1]

Hi, 

Network guest is not part of encryption domain and for mobile access I using a specific domain and not include the guest network.

This is the message with drop packets. 

Thanks,

Marco 

[PhoneBoy]

Need to see the entire log card, not just the message.

Also need to understand the topology.

[sys_Admin1]

Hi,

Thanks for your help. 

I solved my issue with sk44075. Apply solution for Cause 2: Office Mode IP Pool is part of the VPN Encryption Domain

Thanks,

Marco