Issue with GP VPN

[FarzanaMustafa]

Hello,

We have setup GP VPN and it works, VPN client can talk to network.

However, if we take initial from internal work to VPN client, it is not working. 

For example, when VPN enabled, I got an IP: 192.168.246.9, and it can reach server: 192.168.16.31
However, if I ping or rdp to 246.9 from 16.31, it doesn’t work.

Is this expected?

If not, how to solve this?

[Mick_Ball]

You will need an outgoing policy to allow ping and rdp from your internal network to your GP clients/zones etc...

[FarzanaMustafa]

Hi @Mick_Ball 

Yes, there is a policy from server to VPN Client and it works.

What else can we check?

[Mick_Ball]

Take a look at the allowed traffic, is the NAT working correctly.

could yourun wireshark on the client to see if packets are reacching it.?

[ram1989]

The problems aren’t actually in the configuration but are in the target network where the system is that you’re trying to reach, or even in the target system itself. But in order to reach such a conclusion, you need to eliminate possibilities by doing tests that eliminate possibilities until a conclusion emerges that you can use to effectively resolve the issue.

There are some tools that will be helpful in trying to visualize the traffic and testing which path traffic follows, namely these;

• TCPdump – Linux command line tool to visualize network packets
• WireShark – Windows GUI tool to visualize network packets
• ping – a Testing tool to determine if a message can be sent back and forth between source and destination
• traceroute – Similar to the above but tries to determine every hop between the source and the target destination