Solved

VPN Problems after network gateway changes.

Posted on 2008-06-24
4
200 Views
Last Modified: 2010-04-12
Hi All,

I have users coming in to my network on a ipsec vpn through a Cisco ASA 5510. They have access to one server (mail server) and use a virtual address range of 172.16 etc. The mail server gateway setting is pointing at the asa box on ip 254. We also have a router going to our head office on ip 1.

Now our head office wanted us to route all mail in and out to the head office so asked us to change the gateway settings on the mail servers network card to the .1 router instead of the .254 ASA box. All is fine except the vpn users can access the mail server , cant even ping it. So i put the gateway back to 254 and then added an extra gateway (under adv settings) for .1 which works fine.

Problem is any time i restart the mail server the vpn users are locked out again until i remove the gateway setting and put them in again. Any Ideas?

0
Comment
Question by:frontechltd
  • 2
4 Comments
 
LVL 4

Expert Comment

by:fileinster
ID: 21861652
What email server are you running?

Does the ASA have a route to the addresses in head office via the .1 router? If so it should simply be a matter of configuring your email server to route all mail towards the IP address of the mail server in head office. If there is no upstream mail server then that is a case for policy routing. I know you can configure policy routing on the router, which would work, but no sure if this feature exists on the ASA.
0
 
LVL 79

Accepted Solution

by:
lrmoore earned 500 total points
ID: 21862100
Add a static route on the mail server:
C:\>route add <subnet of VPN clients> mask <submet mask> <IP of ASA.254> -p
0
 

Author Comment

by:frontechltd
ID: 21872714
In answer to both questions, fileinster: we are running lotus domino. Will check the firewall for routes.

Irmoore: tried the add route and got this:-
The route addition failed: Either the interface index is wrong or the gateway do
es not lie on the same network as the interface. Check the IP Address Table for
the machine.

Thank on you help so far
0
 
LVL 4

Expert Comment

by:fileinster
ID: 21874663
If you tried what LRMoore suggested and got that response it means you got your parameters wrong. Check the help "route /?".

His answer will solve your problem 100%, although not very elegant. But who wants elegance?
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

Suggested Solutions

For a while, I have wanted to connect my HTC Incredible to my corporate network to take advantage of the phone's powerful capabilities. I searched online and came up with varied answers from "it won't work" to super complicated statements that I did…
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now