dtsomp
I have the following set up:
AS has two interfaces, one in the LAN subnet, one in the DMZ subnet.
Default route is through the LAN interface. The DMZ interface is only used for clients connecting to the server.
VPN clients are configured to use NAT to access the internal networks.
As a client:
- when I try to access any OTHER subnet, it works as expected. Client traffic is NATed and all packets seem to originate from the AS LAN interface.
- when I try to access machines on the LAN subnet (192.168.10.0/24), there is no NAT. Tcpdump shows that traffic reaches the machines but it uses the client's VPN address (10.0.10.x) as source address. Given that I don't have routes for 10.0.x.x, this means that responses never make it back to the client, thus breaking connectivity.
Does anybody know why is this happening? I feel like there's an option somewhere in the AS that I've missed.
PS. I know that adding the route to 10.0.x.x on my servers manually is a solution, but... I hope you understand it's just a quick hack until the real problem gets rectified 🙂
