Wireless Access

Reply
Frequent Contributor II
Posts: 109
Registered: ‎01-01-2012

Via user unable to access internal network

Hi I am trying to configure via client based VPN. Clients are able to access controller with private IP but not able to access internal network.

The client vlan is present only on controller & has dhcp enabled. I have enabled source-Nat for that vlan.Tried source natting under VPN services. Do I need to add acl in via user role. What should b the acl and its number in the list.

Same config works for raps.

 

Harshad

Guru Elite
Posts: 21,515
Registered: ‎03-29-2007

Re: Via user unable to access internal network

[ Edited ]

Do you have an "any any any src-nat" at the end of your Via user rule?  This is needed if the ip addresses you are giving to your users is not routable on your network

 

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Frequent Contributor II
Posts: 109
Registered: ‎01-01-2012

Re: Via user unable to access internal network

I guess only rule I have is ..any any permit..
Guru Elite
Posts: 21,515
Registered: ‎03-29-2007

Re: Via user unable to access internal network

http://www.arubanetworks.com/vrd/VIAAppNote/wwhelp/wwhimpl/js/html/wwhelp.htm

 

 

It is essential that the addresses used in the VPN address pool for VIA are routable from the internal corporate network. If not, the VIA clients cannot connect to the corporate resources and vice-versa. Alternatively, you can implement Network Address Translation (NAT) on the VLAN used for the VPN address pool. Remember that NAT might cause issues with certain applications such as file transfer protocol (FTP). For information on VLAN Design for remote networks, see the Aruba Virtual Branch Networks Validated Reference Design."



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: