cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Remote access VPN, NAT and PBR

kpintens
Beginner
Beginner

Hi

On the router there is PBR configured because of multihoming.  Now when remote users connect via VPN they connect fine but are not able to access any resources due to the fact that the traffic is PBR to one ISP but not to the other (internet only traffic).  This PBR needs to remain in place.  Is there a way to exclude VPN users from the PBR?

Thanks

Koen

7 REPLIES 7

Hi,

The VPN users should have their own pool of IP addresses assigned when they connect via VPN.

In this way using ACLs, you can exclude the VPN subnet from PBR.

Federico.

They are in their own pool and tried denying that in the ACL for PBR but still no joy

So what happens to the VPN clients when they connect?

They are routed out to some ISP instead of been able to access the inside network?

What does the PBR looks like?

Federico.

users connect fine, when coming from both ISP's but when a remote user connects it can come from anywhere, access to the resources works if coming from ISP 1 but not from the other one (and this should be ISP x because this should be any ISP worldwide)

PBR is set to route traffic from certain servers via ISP 1, ISP 2 is  used for internet access

hi federico,

is this scanrio is possible or not ?

if it is possible guide me.atleast tell me the status (possible or not possible).because i am trying mor than a week for this type of solution.

thanks

cyril

jeffrey-hughes
Beginner
Beginner

Does anyone have a solution for this?  I am running into a similiar  situation.  I have a 2911 with 2 ISPs.  ISP1 is for internet traffic  only, ISP2 is for remote locations connected via Tunnels.  When I  connect via Remote VPN, I connect, but can not access ANY resource.

Remote VPN has unique network, 172.27.0.0/24

172.27.0.0/24 is excluded from PBR ACLs

Remote VPN is setup on ISP2 - Same as the VPN Tunnels.

Any help would be appreciated.

zeuscyril
Enthusiast
Enthusiast

hi all,

i am facing same issue anybody got solution for this

or it is not possible at all.

thanks

cyril

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: