topic VPN 3002 behind cable modem in Network Security

VPN 3002 behind cable modem

v-yelmene — Fri, 21 Feb 2020 08:18:38 GMT

I have experienced something odd with our 3002 Hardware Clients behind a Cable Modem. It appears that if the Client does not have a current session established with the Concentrator, we are unable to communicate with the 'public' interface on the Client. The 'public' interface IP is provided by the ISP, and statically assigned. The Clients also have a default gateway entry pointing to the ISP gateway.

I figured the public interface would still be accessable even if no IPSEC session is established with the Concentrator.

Does anyone know why this would happen?

Re: VPN 3002 behind cable modem

travis-dennis_2 — Tue, 02 Aug 2005 22:14:18 GMT

First off is the public interface reachable when an IPSec session is up? You have to allow http(s) access on the public interface by rules on the 3002. Also are you allowing split tunneling? If not then this may pose a problem depending on your configuration as the only traffic allowed to pass would be through the tunnel (that does not exist).

Hope this helps.

Please remember to rate all replies

Re: VPN 3002 behind cable modem

v-yelmene — Tue, 02 Aug 2005 23:41:29 GMT

Yes, the public is reachable when IPSEC session is up.

https is enabled on public interface.

Split tunneling is also enabled.