Firepass VPN

[Brian Somers]

Well, I don't know anything about firepass, but my guess would be that
it doesn't work with NAT.  Do you know of anyone else that works for your
company that uses it with NAT?

Either way, you'll need to analyse the traffic on both sides of the BSD
box to see if it's passing through ok.  Certainly, when I create a VPN
through a NAT gateway, I have to do at least some port forwarding on
the NAT box....

On Fri, 3 Dec 2004 12:06:05 +0000 (GMT), Henrik Morsing <henrik at morsing.cc> wrote:
> 
> Hi,
> I have a big problem. I must be able to log-in to work from my laptop
> using Firepass. Firepass is a browser based SSL tunnel VPN solution.
> 
> The problem is it doesn't work an it appear to be my freeBSD router
> messing it up. Set-up as follows:
> 
> FreeBSD 4.9 router using ipnat and nothing else. One interface connect to
> a switch where my laptop and D-link 300G+ modem is also connected.
> Firepass sets up an SSL connection (and nothing else) and I actually get
> in, can access our systems but only for 10-20 second. It then changes
> state to 'reconnect' and I'm stuck forever.
> 
> This works with a USB-modem connected to the laptop, a 3G card in the
> laptop *and* if firepass used the proxy server on the same FreeBSD box.
> Unfortunatelyy the proxy solution isn't really a good way of doing it.
> It's getting a bit serious as I have to be on call and our PC-supporters
> and network team have given up and blame my BSD router.
> 
> Help...
> 
> Cheers
> Henrik Morsing
> morsing.cc
> 
> ------ FreeBSD UK Users' Group  -  Mailing List ------
> http://listserver.uk.freebsd.org/mailman/listinfo/freebsd-users
> 


-- 
Brian <brian at Awfulhak.org>                        <brian@[uk.]FreeBSD.org>
      <http://www.Awfulhak.org>                   <brian@[uk.]OpenBSD.org>
Don't _EVER_ lose your sense of humour !