RemoteAccess and S2S

[Daniel_Hainich]

Hello, iam running R80.20 and want to grant my remote-access users access to ressources behind an 2S2-Vpn. my internal-users have access and its working. internal users are hidden behind gateway. traffic for my remote-access users is dropped, so i added an access-rule for these users and created an hide-nat-rule. but its not working. any ideas?

daniel

[G_W_Albrecht]

I think you need a VPN client Encryption Domain, containing all nets that should be accessible. Go into Gateway > Network Management > VPN Domain > Set specific VPN Domain for GW Communities > Select the RA Community > Set > User Defined select a Network group created for this purpose.

[PhoneBoy]

In addition you may want to configure IP Pool NAT instead of a HIDE NAT rule as it was designed explicitly for this purpose.

[Daniel_Hainich]

thanks, problem is solved. now i have to look for IP Pool NAT. 🙂