Routing from telkom VPNS to internet

[The_Unbeliever]

Hi Guys

I have this little (big?) headache which's bugging me for a long while now.

Basically, the network is like this :

client (10.1.1.22) -- router (10.1.1.254) --- telkom VPNS --- router (192.168.1.254) -- firewall (192.168.1.253) - internet

Using static rules, the client's able to access the network on 192.168.1.x, but can't go any further than that.

If they want internet access, they need to use a proxy server.

They're using an HR Manage application, which knows diddly squat about proxy servers, and expect a direct internet connection.

How do I get the PC on 10.1.1.22 to route and access the Internet without using any poxy proxy servers?

TIA

Ook

 

[Franna]

Have a look at the "Use default gateway on remote network..." setting on the VPN connection.

 

[durbandave]

Hi Guys

I have this little (big?) headache which's bugging me for a long while now.

Basically, the network is like this :

client (10.1.1.22) -- router (10.1.1.254) --- telkom VPNS --- router (192.168.1.254) -- firewall (192.168.1.253) - internet

Using static rules, the client's able to access the network on 192.168.1.x, but can't go any further than that.

If they want internet access, they need to use a proxy server.

They're using an HR Manage application, which knows diddly squat about proxy servers, and expect a direct internet connection.

How do I get the PC on 10.1.1.22 to route and access the Internet without using any poxy proxy servers?

TIA

Ook

you could create a firewall/proxy rule to bypass proxy rules for the 10.1.1.22 or merely for the HR Manage traffic ( by port number )

 

[The_Unbeliever]

Have a look at the "Use default gateway on remote network..." setting on the VPN connection.

The client PC does not use any VPN connection. Basically the telkom VPNS is a site-to-site VPN connection. The routers on 10.1.1.254 and 192.168.1.254 handles traffic passing through the VPNS.

 

[The_Unbeliever]

you could create a firewall/proxy rule to bypass proxy rules for the 10.1.1.22 or merely for the HR Manage traffic ( by port number )

Meaning that if HR Manage uses, say, ports 60, 81, 443 (for example) then I must proxy these three ports?

Will try it... haven't got anything to lose

 

[durbandave]

Does it not use a specific port to connect? 443 is ssl so redirecting all port 443 could be an issue. Port 81 is normally a host to host comms. 60 might be the port you need to by pass. and by this I mean the specific port could be moved to bypass the proxy.

 

[grim]

Add a static route to send the internet/HR application's traffic to 192.168.1.254