Results 1 to 9 of 9
  1. #1
    Newbie
    Join Date
    Jan 2009
    Posts
    3

    Default Pix to untangle site to site VPN issue

    Internet ---> Pix 515 ---> untangle ---> switch ---> server

    We have the untangle set up in bridge mode. We have around 20 site to site VPN's setup. When I put the untangle in place everything working fine except for the traffic bound for the site to site vpns. Thanks in advanced for your help.

  2. #2
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,497

    Default

    Welcome,

    At this point your Untangle is seeing internal traffic as external. You need to create bypass rules for the network ranges you want to pass so the UVM doesn't just discard them.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  3. #3
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,486

    Default

    you or need to fix your network configuration (routing probably isn't right) especially if your vpns are on another subnet...

    either way - we'll need more information probably...

    welcome to the forums!
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  4. #4
    Newbie
    Join Date
    Jan 2009
    Posts
    3

    Default

    The default gateway on our network is a router that connects to our mpls network. In that router there is a static route all traffic not found in the routing table to the pix.
    Example vpn.

    Our internal network is 10.1.11.0/24 The address of the pix is 10.1.11.1.
    The address of the untangle is 10.1.11.8.

    One of the vpn's is on 10.1.0.0 with a subnet of 255.255.248.0

    How would I set up the by pass rule for this vpn.

    Kris

  5. #5
    Newbie
    Join Date
    Jan 2009
    Posts
    3

    Default

    Can someone point me in the right direction to resolve the issue we are having.

  6. #6
    Master Untangler GuruLeeNyc's Avatar
    Join Date
    Feb 2008
    Posts
    143

    Default

    Has anyone been successful in establishing a PIX-to-Untangle IPsec VPN tunnel? If so, please share your notes.

  7. #7
    Master Untangler
    Join Date
    May 2008
    Location
    Bryan, TX
    Posts
    260

    Default

    Quote Originally Posted by GuruLeeNyc View Post
    Has anyone been successful in establishing a PIX-to-Untangle IPsec VPN tunnel? If so, please share your notes.
    Not currently possible as Untangle does not support IPSEC.

  8. #8
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,497

    Default

    Yes and if you terminate an IPSec tunnel on the external side of an Untangle bridge you need to create a bypass for the VPN traffic or the bridge will stop the packets.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  9. #9
    Untanglit
    Join Date
    Oct 2009
    Location
    Melbourne
    Posts
    21

    Default

    Quote Originally Posted by kkibodeaux View Post
    Can someone point me in the right direction to resolve the issue we are having.
    HI,

    What is the UT DGW IP? is that 10.1.11.1?
    What is the Client DGW IP?
    What is the VPN Client DGW IP?
    What is the Proxy server IP?
    Can VPN Client ping the UT?


    Thanks,

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2