Vpn remote acces mab agains cluster with only private addres

[ERTK]

Hi,

A customer had a cluster only with private range addres. 

On this cluster it had configured vpn remote acces making Nat on isp provider.

Recently they need to move Nat from isp to this cluster....but client cannot reach. 

Is it possible to make than this cluster make also this kind of Nat ( public interface is not configure on this cluster but isp provider route one public ip address for.thqt purpose)?

[G_W_Albrecht]

If the ISP routes a public IP to a cluster, the cluster needs a WAN interface with that public IP that also should be part of the Remote Access community.

[ERTK]

i understand. maybe creating an cluster interface with this public ip address like vip.....and configuring rules and vpn link selecction could it be.

[G_W_Albrecht]

Otherwise, the cluster will not feel responsible for this public IP...

[ERTK]

I just create a dummy cluster interface with this public ip address like via pf this dummy....it is a internal interface..it means than the traffic must in for current transport interface between isp provider and this cluster. 

Vpn client connect but...after a few minutes it disconnect

[G_W_Albrecht]

Afaik this can not work with an internal interface. Look into GW and RA client logs to see the reason the connection is lost!

[ERTK]

sorry, the topology interface config like an external....i want to say that this interface is behind firewall in flow....

[G_W_Albrecht]

Should be the external/WAN VIP interface of the cluster according to Remote Access Admin Guide. I would suggest to contact TAC as there may be a special config making this possible.

[ERTK]

i'll do. Thanks