Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Other Astaro Products > Astaro Secure Client (ASC)

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 02-18-2010, 07:49 PM
Junior Member
 
Join Date: Mar 2009
Location: münster
Posts: 22
Default ASC connection to LAN

Hi

i have a problem with the ASC client and connect to internal LAN. I can establish a connection to the ASG but when i want to connect via RDP to mashines in the inernal LAN i got a message "connection failed"
Here is what i did

Create a IPSec poliy with PSK and Xauth
Create a packetfilter rule for the user who use the ASG to the internal LAN, like this User -> any -> LAN
Create a Masq Rule like this User -> External LAN

So what i´m doing wrong or what i miss?

Kind regards
ACID25
Reply With Quote
  #2 (permalink)  
Old 02-18-2010, 08:06 PM
Moderator
 
Join Date: Jul 2001
Location: southern California
Posts: 5,359
Default

Hi, you should check the packetfilter and IPS logs on the firewall, but it's also possible that the windows firewall on the RDP PCs isn't allowing connections outside the LAN.

Barry
__________________
http://DealBert.net
Home & business end-user since v1.x
  • ASL 6.3x, HP DL145 Dual Opteron, 1GB RAM, 6 gigE NICs, 50-IP Platinum License
  • ASL 7.5x, HP DL360G5, Xeon 5160, 3GB, RAID, gigE NICs, 50-IP Platinum License
  • ASL 7.5x, 17-watt fanless mini-ITX system: MSI IM-945GSE-A Atom n270, 2GB RAM, Morex T3310 case. 2 Intel GigE, 3 VLANs. 80G 5200rpm 2.5" HD
    Netgear GS108T gigE VLAN switch & Linksys WRT54G WAP
    Total network infrastructure: 27 watts. 100-IP Home User. FiOS 10mb/2mb
Reply With Quote
  #3 (permalink)  
Old 02-18-2010, 08:47 PM
Wizard
 
Join Date: Oct 2005
Posts: 2,611
Default

There is no need to create special NAT rules for a remote user in your scenario. You do need to create appropriate packet filters, or enable the auto packet filter option in the VPN Configuration.

As Barry said, I'd check your IPS and IM/P2P logs; there are several IPS rules that by default may affect your ability to connect via RDP; you will need to disable them if they are being triggered.
__________________
Convergent Information Security Solutions, LLC
Astaro Preferred Solution Partner
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 03:16 AM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.