topic Re: Multi-hop VPN in General Topics

Multi-hop VPN

mmeehan — Thu, 28 Feb 2019 13:29:14 GMT

We have an interesting VPN request that's I have not seen yet.

User logs into Global Protect from home and RDP's to desktop on campus. The user then tries to open a Global Protect connection from that campus workstation to get access to another restricted host on campus. The issue we have is when the user tries to connect on the second workstation the RDP session will disconnect so the user can't make the "double" VPN connection.

I don't know if this is even possible since it would seem to me the IP changes on the remote host. Has anyone tried this or had any success making this work?

Re: Multi-hop VPN

Mick_Ball — Thu, 28 Feb 2019 13:39:16 GMT

i have no idea if it will work or not but you will at least need to have split tunneling on the second VPN connection.

on the second vpn connection just allow traffic to the remote host (or subnet) only in the include section. if you are connecting via domain name then you may need to allow DNS also..

good luck, let me know if it works...

Re: Multi-hop VPN

Mick_Ball — Thu, 28 Feb 2019 13:41:08 GMT

FYI.

forgot to mention, this is configured in the gateway settings. on newer versions you can also enable split tunnels on domain names...

Re: Multi-hop VPN

mmeehan — Thu, 28 Feb 2019 15:12:36 GMT

Thanks for the quick reply, I will try it out and see if that fixes the issue.