Remote Access VPN to provide access to S2S VPN - 40F 7.2

[shlomim]

Hi There,

I have 40F running 7.2

I have Site2Site IPSEC VPN Running.

I have added to to Phase 2 the Subnet that is used for the Remote Access SSL-VPN users (172.16.255.0/24).

over the split tunnel - I've added the subnets that are in the remote S2S Firewall (because these are the relevant subnets).

I've added a rule over the firewall - do I need to set anything else ?

here is the configuration I've used:

config firewall policy
edit 26
set name "POD1"
set srcintf "ssl.root"
set dstintf "S2SVPN"
set action accept
set srcaddr "SSL VPN"
set dstaddr "POD1"
set schedule "always"
set service "ALL"
set users "pod1"
next
end

config vpn ssl settings
set servercert "SSL-VPN"
set tunnel-ip-pools "SSL VPN"
set source-interface "wan"
set source-address "all"
set source-address6 "all"
set default-portal "SSL_VPN"
config authentication-rule
edit 1
set groups "VPN_USERS"
set portal "SSL_VPN"
next
end
end

config vpn ssl web portal
edit "SSL_VPN"
set tunnel-mode enable
set web-mode enable
set limit-user-logins enable
set save-password enable
set ip-pools "SSL VPN"
set split-tunneling-routing-address "KRURLEE"
config bookmark-group
edit "gui-bookmarks"
next
end
set theme jade
next
end

[sjoshi · Accepted solution]

Hi shlomim,

Can you share your topology.
is is user>>sslvpn>>fgt>>ipsec tnl>> remote sites ?

In the firewall policy make sure to add the user grp VPN_USERS
Is there any specific issue you are facing?