Results 1 to 9 of 9
  1. #1
    Master Untangler johndball's Avatar
    Join Date
    Apr 2008
    Location
    Virginia
    Posts
    174

    Default Untangle 10 unable to see alias internal interface

    I'm having a problem with accessing an internal web server in a pseudo-DMZ using an internal IP alias.

    My UT box is 192.168.12.1. The clients on 192.168.12.x can hit the gateway without issue.
    The pseudo-DMZ is 10.0.12.1. The clients on 10.0.12.x cannot hit the gateway.
    I also have other internal aliases at 192.168.13.1 and 192.168.14.1. Anything on these networks cannot hit the gateway.

    I'm not having this problem on UT 9. The above setting has been working for many months without issue.

    Attached is a screenshot of the UT box and a tracert test to 10.0.8.x network (the network resides on the UT 9 box).
    *This box is a VPN client to the UT 9 box. You'll notice traces outgoing to 192.168.11.1. For some reason, this box is routing the aliases via VPN (I think, I've had some rum and need another set of eyes )

    From a client residing on a 192.168.9.x network, traces to 10.0.12.x get sent out from the UT 9 box to the interwebs.
    Attached Images Attached Images
    Last edited by johndball; 04-08-2014 at 06:46 PM.

  2. #2
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Lake Tahoe
    Posts
    9,813

    Default

    I'm assuming all these aliases are on the internal interface. Please post a screen shot of the internal interface configuration.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Master Untangler johndball's Avatar
    Join Date
    Apr 2008
    Location
    Virginia
    Posts
    174

    Default

    Clipboard03.jpg
    Internal alias on working UT 9 box


    Clipboard04.jpg
    Internal alias on non-working UT 10 box


    ExportedHosts.jpg
    Exported networks on UT 9 box in which UT 10 box is a VPN client.

  4. #4
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Lake Tahoe
    Posts
    9,813

    Default

    I don't see anything that sticks out as wrong. I would open a support ticket.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  5. #5
    Master Untangler johndball's Avatar
    Join Date
    Apr 2008
    Location
    Virginia
    Posts
    174

    Default

    Email sent. Thanks for reviewing the post. I was hoping it would be something simple.
    --
    "I have often regretted my speech, never my silence." - Xenocrates
    https://www.johndball.com

  6. #6
    Master Untangler johndball's Avatar
    Join Date
    Apr 2008
    Location
    Virginia
    Posts
    174

    Default

    Four days of trying with the assistance of Untangle support and I found this thread today:
    http://forums.untangle.com/networkin...h-openvpn.html

    That really sucks. Oh well.
    --
    "I have often regretted my speech, never my silence." - Xenocrates
    https://www.johndball.com

  7. #7
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Lake Tahoe
    Posts
    9,813

    Default

    If you need multiple network on both sides of a VPN use IPSec


    Sent from my iPhone using Tapatalk
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  8. #8
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,747

    Default

    Quote Originally Posted by johndball View Post
    Four days of trying with the assistance of Untangle support and I found this thread today:
    http://forums.untangle.com/networkin...h-openvpn.html

    That really sucks. Oh well.
    Yes, you can: http://wiki.untangle.com/index.php/O...Remote_Clients

    If there are multiple networks reachable through this remote client, a comma seperated list of CIDR networks can be used.
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  9. #9
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,414

    Default

    Yeah 10 fixes this, that thread is old data.

    More to the point, what does OpenVPN have to do with not being able to ping an alias on Untangle?
    Last edited by sky-knight; 04-14-2014 at 05:10 PM.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2