cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2609
Views
5
Helpful
15
Replies

Can access virtual servers, but not host server after vpn

Trond Husoe
Level 1
Level 1

When on the network I can access the host server and all other virtual servers (virtualized with virtualbox). But when I connect with VPN I have no access to the main server, but I have access to any of the hosts servers - and I can get access to the main server from one of the guest servers.

Where shall I start to look?

using 5505 and asa is version 8.4(2).

The nat-setup is like this:

3 (inside) to (outside) source static any any   destination static NETWORK_OBJ_10.10.10.0_28 NETWORK_OBJ_10.10.10.0_28 no-proxy-arp route-lookup

    translate_hits = 0, untranslate_hits = 0

4 (inside) to (outside) source static any any   destination static NETWORK_OBJ_192.168.1.128_27 NETWORK_OBJ_192.168.1.128_27 no-proxy-arp route-lookup

    translate_hits = 0, untranslate_hits = 0

5 (inside) to (outside) source static NETWORK_OBJ_192.168.1.0_24 NETWORK_OBJ_192.168.1.0_24   destination static NETWORK_OBJ_192.168.254.0_28 NETWORK_OBJ_192.168.254.0_28 no-proxy-arp route-lookup

    translate_hits = 37, untranslate_hits = 63771

6 (outside) to (outside) source dynamic NET-VPNPOOL interface 

    translate_hits = 0, untranslate_hits = 0

15 Replies 15

Since this post I have started over again. I had to reinstall the server (it wasn't anything important on it, so no worries there).

So the setup is like this:

Server OS: Ubuntu 12.04.4 server

(At time of writing 14.04 was just released an no point-versions had been published) Server has two NICs:

eth0:192.168.1.8

eth1: 192.168.2.8 (dmz)

The server is currently running two servers in the dmz-sone - a webserver (192.168.2.100) and an ftp-server (192.168.2.101)

In the router I have set up one default gateway - 192.168.1.1. Both 192.168.1.0 and 192.168.2.0 points to this default gateway.

I more or less followed the instructions on this page:

http://www.yourownlinux.com/2013/07/how-to-configure-ubuntu-as-router.html

And now the servers in the DMZ have access the internet and can be updated with apt-get or whatever software the OS is using to be updated/upgraded.

Hope this post helps someone