Connect to secondary Network

[mfielitz]

I have untangle in Router mode. My corporate network is on a 192.168.0.0/24 network, I have a secondary (10.74.0.0/20, does not run thru untangle) network that has a application that I use on my corporate. This works with rules setup in the router on both sides. Now, when I use the open VPN from home (have application installed on laptop) it won't connect to the 10.74.0.0 network.

How would I get his working? I attached a network map.

Thank you!

[mfielitz]

oops forgot to attach!

[dmorris]

Can untangle ping the 10.74.x.x hosts?
Have you exported 10.74.x.x/16?

Untangle will not NAT openvpn traffic exiting the server, so you will need to make sure that traffic is routable without changing the source address from the VPN address pool. Since those hosts aren't using Untangle as a gateway I doubt the return traffic to the VPN hosts is going to reach Untangle to go back into the VPN. Instead it will just go to their default gateway and out to the internet and probably blocked by the ISP as it is going to an unroutable address.

[mfielitz]

Yes I can Ping the 10.74.0.0 network from UT (see screenshot).

I have no control over the 10.74.0.0 network, it's from our vendor, and they won't let me touch it.

Thanks!

[dmorris]

Well then there isn't much you can do unfortunately. Untangle can not route packets back to the VPN clients if it doesn't see them.

That is, of course, assuming you exported them in the first place.

[mfielitz]

Yes the network is exported. What if I setup VPN on the sbs server on the corporate network, would that work?

[dmorris]

Sure, if it NATs the VPN traffic as it goes out to a local IP.

[mfielitz]

So how what I setup that up in untangle?, Do I just forward port 1723 to the sbs server?

Thanks for the help!