Remote Access SSL VPN Static IP address results in route issues

Question

Hello there I'm using version XGS2100 (SFOS 20.0.0 GA-Build222) and getting an error in SSL VPN Static IP 
 When I use static IP for VPN user, the firewall cannot connect to the static ip of vpn user 
 
 When i have the static IP Address disabled in my SSL Global Config it works fine

Nikhil Bhandari · Accepted Answer

For users with static IP, the ping from the firewall (what is known as system generated traffic) will not work as there is no specific route setup for the static IP subnet. If the ping is from any LAN servers connected to the firewall, to the remote user, it will work. Do you have a use case for the ping from firewall to work or is it only for testing purpose ?

Linh Ph&agrave;ng T&uacute; Linh · Answer

I realized that in the routing table there are only routing tun# as follows: 
 and I added a route using the command line: ip route add 172.16.101.128/25 via 0.0.0.0 dev tun0 It worked.

Remote Access SSL VPN Static IP address results in route issues

Top Replies