 Re: VPN (SecureClient) problem
The encryption domain should include all networks available via the internal eth interface. My internal network is on 192.168.x.x accessible via 192.168.50.x (Firewall cluster IP and cluster member internal interfaces).
When trying to connect, SecureClient times out with a timeout error message - no response from gateway.
I'm not sure what you mean by manual/automatic topology on SecureClient?
The strange thing is that I am able to add the site in the 1st place and it can definitely communicate with the gateway. When I check the logs, it appears that the connection it trying to talk to the Cluster IP of the internal LAN... 192.168.50.x and I can't seem to understand why if I'm connecting from externally.
The cluster IP on the internal LAN is my gateway when accessing the internet (from internally), and the associated interfaces have been configured as the management interfaces on the cluster members. |