VPN - Remoted PC is routed normally but remoted mobile is not

[kathanh257]

I checkout that last week till now, remote access from mobile cannot ping to some important subnet. Before that time it's working normal. 
I try to ping our dns server from remoted mobile and result is disconnect. But it is connected if I try from remoted PC.

one more thing, remoted phone only ping 8.8.8.8.

Could anyone tell me what wrong with this case? Thanks in advance.

[PhoneBoy]

A lot more details are needed, for example:

• What version/JHF is the gateway.
• What version of VPN clients on what OS and version
• Anything that shows in the logs that might explain it "not working"

[kathanh257]

• What version/JHF is the gateway.
  • R81.10 Jumbo Hotfix Take 156
• What version of VPN clients on what OS and version
  • Client: iphone or androi
  • VPN Client: Capsule 1.600.138
• Anything that shows in the logs that might explain it "not working"
  • I have checked the incoming traffic log (from remoted mobile) and see that only traffic from mobile to 8.8.8.8, others traffic is not captured.

[PhoneBoy]

You said "it is connected if I try from remoted PC" but mentioned nothing about what OS or VPN client version/type was used for said test.
Have you done any packet captures from the gateway to confirm the VPN client is even sending traffic to the gateway?
If not, I'd start there as it should give us an idea of where to start looking.
That and reviewing the client logs, which you can generate from the app.

[kathanh257]

I checked some config as below:

A) GW Config:

• 1) GW properties -> VPN Clients -> Remote Access -> Office Mode
• + Enable Office Mode & Allow Office Mode for all users
• + Manual( using IP pool) CP_default_Office
• 2) GW properties -> VPN Clients -> Remote Access -> Remote Access
• + Allow VPN clients to access the Internet through this Security Gateway

B) Mobile side:

• 1) Mobile received Office Mode IP? -> Yes
• 2) Check Capsule VPN Type: IPsec

As config as above, I try some test and the results I realize is:

• when PC connect VPN, it's routed through CPGW but mobile is not (even if I allow VPN clients to access the Internet through my Gateway). 
• the mobile still routed through 4G after it's connected with VPN + received Office Mode IP

[the_rock]

I agree with Phoneboy that way more details are needed here. Versions/jumbo to start with, then, did you do any captures, ie tcpdump or fw monitor? Any relevant drops, logs?

Andy

[kathanh257]

As I answered above, the mobile received VPN IP normally but it's not routing through the gateway, even if I upgrade the version R81.10 standalone to R82. Could you give me any idea to fix this?