Enterprise VPN with Safe@office 500 in bridge mode

[aaron.root]

Hello,

This is my first post to the forums, hopefully this hasn't already been answered somewhere. If it has, if someone could point me in the right direction I'd appreciate it.

I have several Safe@office 500 devices managed by the SMP. The one I am having problems with is behind another router on an existing network. I have created a bridge and put the LAN and WAN interfaces in bridge mode. I can connect to the smp and the Enterprise VPN comes up, however when I try to send traffic over the vpn, I get errors in the event log that say "Packet should not be encrypted".

I should also point out that we are hiding the internal networks of the satilites from the network at the center in all of our other vpns. So under "Internal network topology" I have a 10.x.x.x address space assigned, with network objects mapping the 10.x.x.x to the addresses on the internal network. It works perfectly everywhere but this one.

It seems to me like it just doesn't want the encrypted traffic on the LAN interface, but there may be more to it than that. I have tried adding different firewall rules to allow anything on the LAN interface and I can get rid of the error that way, but the traffic still doesn't pass.

Hopefully this description makes sense.

Thanks in advance to anyone who might have some input on this.

Aaron