Security

Reply
MVP
Posts: 750
Registered: ‎04-13-2009

OnGuard - VPN access to different networks from same controller

Hi All,

 

Imagine this, you have a single controller configured as a VPN concentrator. 

 

OnGuard is being configured as VPN only, no health checks.

 

You have 2 separate networks (network A and B) that you want to provide VPN access to that reside behind the single controller. These separate networks have different authentication servers, IP ranges, DNS, etc and are not connected other than at the controller.

 

We can setup different Via connection and authentication profiles for the different networks. The users would just have to choose network A or B when downloading the Via profile.

 

 

Issuing the correct routing to users from network A and B upon establishing a Via connnection can be achieved by using external services interface (ESI).

 

Now it gets interesting. The problem that occurs is that users from network A and B are both issued with the DNS servers from the controller on : "Advanced Services > VPN Services > IPSEC"

 

My question is, is there a way to issue different DNS servers to 2 different groups of Via VPN users?

 

Cheers

James

 

Cheers
James

-------------------------------------------------------
-------------------@whereisjrw-------------------
------------------------blog-------------------------
ACCX #540 | ACMX #353 | ACDX #216
-----------Mobility First Expert #11----------
-------------------------------------------------------

If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users via search.
MVP
Posts: 750
Registered: ‎04-13-2009

Re: OnGuard - VPN access to different networks from same controller

I reached out to HPE who have said that this is not possible. :(

Cheers
James

-------------------------------------------------------
-------------------@whereisjrw-------------------
------------------------blog-------------------------
ACCX #540 | ACMX #353 | ACDX #216
-----------Mobility First Expert #11----------
-------------------------------------------------------

If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users via search.
Search Airheads
Showing results for 
Search instead for 
Did you mean: