1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

SSL VPN Problems

Discussion in 'Cisco Small Business Routers and VPN Solutions' started by Paul_B, Jan 30, 2007.

  1. Paul_B

    Paul_B LI Guru Member

    I am having problems with the SSL VPN to my RVL200. I am unsure whether it maybe that I am trying to use it through works proxy server. At home it works using the internal IP address or external DNS name.

    However, at work using the corporate proxy it can't create the SSL pseudo dial-in connector. Anyone seen this, or give advice?
     
  2. DocLarge

    DocLarge Super Moderator Staff Member Member

    First thoughts are that there may be some blocking going on at the firewall. Is there a log that you can run at work to determine this? I'm guessing you're at work experimenting and have no access to the actual network, correct?

    Jay
     
  3. Paul_B

    Paul_B LI Guru Member

    You are correct. As it is SSL is it possible for them to SPI?
     
  4. Paul_B

    Paul_B LI Guru Member

    I am feeling more confident that this may work.

    Tonight I attached a debugger to Internet Explorer as I accessed the SSL VPN through works proxy. Again it failed. However, reviewing the debug file it looks as though name resolution failed. This makes sense as connected to work the internal DNS does not forward external, it doesn't need to as external access is via a proxy.

    I have added a host entry into my host file. The SSL VPN now seems to form, although I can't check until tomorrow. I was connecting to work through a VPN client, then to a proxy to form a SSL VPN back to where I started. The VPN client detects changes to the route table and drops.
     
  5. Paul_B

    Paul_B LI Guru Member

    All fixed and working like a dream. Only additional step I had to take was to use a definate proxy server in IE rather than the auto-configuration option.

    I am very happy as I can now connect to my home network from home over a secure SSL VPN
     
  6. DocLarge

    DocLarge Super Moderator Staff Member Member

    Is this a typo, meaning you meant to say "I can now connect to my home network from work?

    Jay
     
  7. Paul_B

    Paul_B LI Guru Member

    Yes, sorry.

    Obviously a little too excited at the time! :)
     

Share This Page