Make sure you check the box on your VPN client config in the unifi controler has the "expose to site to site vpn" box checked. Is your VPN allowing traffic on all ports across? Can you VNC into a machine at your local office? A really bad work-around would be to then VNC from that machine into the remote office.
Connecting to the VPN should take out any issue with ports. I have used the workaround of VNCing from one of them to the remote office, but it's not ideal by any means, and it is very clunky. I'm sure it has something to do with allowing traffic from Most likely a routing statement or something. I just don't know how to configure it on a USG. I brought up the ports because our VPN solution lets us setup access control lists, so we do block ports. Can you run a "tracert You should get a hit from your gateway, and the gateway at the local office.
Then run a "tracert You should get a hit from the remote office's gateway and local office's gateway. If not, then can you see the routes being used by the gateways? On cisco gear it's "show ip route", not sure about yours. That will show you the routes being used by the home pc, specifically look at the metrics. If you have a second nic wifi, etc it may be using the wrong interface to get to the remote office. From my home, when I tracert If I tracert to a server there, it goes:.
From the remote office tracert to I don't know how to check the ip route on the USG. Route print from my machine for anything starting with a 10, though I would think that it would include That first line in the route print output covers you. Anything outgoing that matches Sorry, I work better with pictures:. If it thought everything I just don't know how to fix it. I wanted to make sure that you didn't have any overlap in your And it looks like you don't. If yes, the most likely reason why your connection to Server S drops is because your VPN client was configured to prevent Split Tunnel.
The bad news is: Usually the VPN admin restricts the user ability to change this setting on it client configuration. Sign up to join this community. The best answers are voted up and rise to the top.
Stack Overflow for Teams — Collaborate and share knowledge with a private group. Create a free Team What is Teams? Learn more. Asked 11 years, 4 months ago. Active 8 years, 11 months ago. Viewed 12k times. Improve this question. By connecting to a computer and then initiating a VPN at that computer, you're interrupting your initial connection. Is there any reason you cannot initiate the VPN connection from the initial host?
Add a comment. Active Oldest Votes. If you don't get this error then you might want to consider resetting the filters as illustrated in this TechNet article. If you do get this error and you have the NPS role installed, you may want to check the IP Filter settings under the successful Network Policies rule in the Settings tab. You might also want to check the much more obvious area which I still managed to forget that the firewall rule allowing VNC to connect isn't scoped to exclude the VPN subnet.
I am checking to see if the problem has been resolved. If there's anything you'd like to know, don't hesitate to ask. If you have feedback for TechNet Support, contact tnmff microsoft. Office Office Exchange Server. Not an IT pro? Windows Client. Sign in. United States English. Ask a question.
0コメント