https://community.cisco.com/t5/cloud-networking-platform/connecting-to-separate-subnet/m-p/5460817#M14487 <P>we have two MX devices.MX67 with a subnet 10.100.1.0/24 for our engineers. The second MX250 has subnet 172.16.4.0/24 for our user and servers, including a DUO MFA proxy. I want the engineer to use use client VPN on MX67, but have access to our DUO MFA server behind on the second MX250.</P><P>Any thoughts on how to accomplish this would be helpful</P> Tue, 29 Oct 2024 20:14:01 GMT HeathP33 2024-10-29T20:14:01Z https://community.cisco.com/t5/cloud-networking-platform/connecting-to-separate-subnet/m-p/5460817#M14487 <P>we have two MX devices.MX67 with a subnet 10.100.1.0/24 for our engineers. The second MX250 has subnet 172.16.4.0/24 for our user and servers, including a DUO MFA proxy. I want the engineer to use use client VPN on MX67, but have access to our DUO MFA server behind on the second MX250.</P><P>Any thoughts on how to accomplish this would be helpful</P> Tue, 29 Oct 2024 20:14:01 GMT https://community.cisco.com/t5/cloud-networking-platform/connecting-to-separate-subnet/m-p/5460817#M14487 HeathP33 2024-10-29T20:14:01Z https://community.cisco.com/t5/cloud-networking-platform/connecting-to-separate-subnet/m-p/5460818#M14488 <P>Are these two different sites, and is AutoVPN enabled between the sites?</P><P>If so, as long as the client VPN is configured for full tunnel, and <SPAN>172.16.4.0/24 is enabled for AutoVPN - it should work. Also make sure the client VPN subnet is included in AutoVPN.</SPAN></P> Wed, 30 Oct 2024 09:35:50 GMT https://community.cisco.com/t5/cloud-networking-platform/connecting-to-separate-subnet/m-p/5460818#M14488 Philip D'Ath 2024-10-30T09:35:50Z