cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1102
Views
0
Helpful
7
Replies
Highlighted
Beginner

Remote access VPN, NAT and PBR

Hi

On the router there is PBR configured because of multihoming.  Now when remote users connect via VPN they connect fine but are not able to access any resources due to the fact that the traffic is PBR to one ISP but not to the other (internet only traffic).  This PBR needs to remain in place.  Is there a way to exclude VPN users from the PBR?

Thanks

Koen

7 REPLIES 7
Highlighted

Re: Remote access VPN, NAT and PBR

Hi,

The VPN users should have their own pool of IP addresses assigned when they connect via VPN.

In this way using ACLs, you can exclude the VPN subnet from PBR.

Federico.

Highlighted
Beginner

Re: Remote access VPN, NAT and PBR

They are in their own pool and tried denying that in the ACL for PBR but still no joy

Highlighted

Re: Remote access VPN, NAT and PBR

So what happens to the VPN clients when they connect?

They are routed out to some ISP instead of been able to access the inside network?

What does the PBR looks like?

Federico.

Highlighted
Beginner

Re: Remote access VPN, NAT and PBR

users connect fine, when coming from both ISP's but when a remote user connects it can come from anywhere, access to the resources works if coming from ISP 1 but not from the other one (and this should be ISP x because this should be any ISP worldwide)

PBR is set to route traffic from certain servers via ISP 1, ISP 2 is  used for internet access

Highlighted
Enthusiast

Remote access VPN, NAT and PBR

hi federico,

is this scanrio is possible or not ?

if it is possible guide me.atleast tell me the status (possible or not possible).because i am trying mor than a week for this type of solution.

thanks

cyril

Highlighted
Beginner

Re: Remote access VPN, NAT and PBR

Does anyone have a solution for this?  I am running into a similiar  situation.  I have a 2911 with 2 ISPs.  ISP1 is for internet traffic  only, ISP2 is for remote locations connected via Tunnels.  When I  connect via Remote VPN, I connect, but can not access ANY resource.

Remote VPN has unique network, 172.27.0.0/24

172.27.0.0/24 is excluded from PBR ACLs

Remote VPN is setup on ISP2 - Same as the VPN Tunnels.

Any help would be appreciated.

Highlighted
Enthusiast

Remote access VPN, NAT and PBR

hi all,

i am facing same issue anybody got solution for this

or it is not possible at all.

thanks

cyril