07-12-2021 04:39 AM
Hello
Please try to Setup NAT for OpenVPN, here my Setup
hello together
I think the bounding for ports that are used for OpenVPN to NAT to Outside.
i have here the problem that i can't build any connection to
internal OpenVPN Server, the necessary ports are from me setup
always open.
object network inside-subnet
subnet 192.168.1.0 255.255.255.0
object network dns-server
host 192.168.1.9
object network outside2domino
host 192.168.1.9
object network OpenVPN
host 192.168.1.9
access-list inbound extended permit icmp any any time-exceeded
access-list inbound extended permit icmp any any unreachable
access-list outside_access_in extended permit icmp any any echo
access-list outside_access_in extended permit icmp any any echo-reply
access-list outside_acl extended permit ip any any
access-list outside extended permit tcp any object outside2domino eq lotusnotes
access-list outside extended permit udp any object outside2domino eq 53
access-list outside extended permit udp any object OpenVPN eq 1194
access-list outside extended permit tcp any object OpenVPN eq 1194
access-list outside extended permit tcp any object OpenVPN eq 443
access-list outside extended permit udp any object OpenVPN eq 443
access-list outside extended permit tcp any object OpenVPN eq 943
access-list outside extended permit tcp any object OpenVPN eq 80
object network outside2domino
nat (inside_4,outside) static interface service tcp lotusnotes lotusnotes
object network OpenVPN
nat (inside_4,outside) static interface service udp 1194 1194
access-group outside in interface outside
iam not shure if i need to use the Object-Group command, why the OpenVPN has meny ports to NAT not only one.
Thanks
07-13-2021 01:11 AM - edited 07-13-2021 01:18 AM
Please any one know here any possible help
--
Setup example
1) Interland Server OpenVPN this will Service for Outside people that are traveling in the World and need Access to Internal infrastructure.
2) Firewall are connected that need transfert the OpenVPN Traffic from Outside >< Inside (OpenVPN-Server)
please see the config above..... thanks many time for any possible help
Regards
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide