Hi,
I need to put up a new remote access SSL VPN. I'm using an ASG320 for the SSL. However, I want to route all traffic through the tunnel so that internet-access for the remote access clients are controlled by a central firewall. That could be accomplished by routing "any" network to the tunnel. However, I want all traffic, including internet traffic to flow through the Lan interface on the ASG 320 (see attached diagram). However, the default route on the ASG 320 have to be on the outside interface in order to route traffic to the clients I guess, so is this even possible?
So - packet to an internet host from the client is supposed to go to the Astaro 320, then out again from firewall C.
Is this doable, or will I have a routing issue on the ASG 320 no matter what?
I need to put up a new remote access SSL VPN. I'm using an ASG320 for the SSL. However, I want to route all traffic through the tunnel so that internet-access for the remote access clients are controlled by a central firewall. That could be accomplished by routing "any" network to the tunnel. However, I want all traffic, including internet traffic to flow through the Lan interface on the ASG 320 (see attached diagram). However, the default route on the ASG 320 have to be on the outside interface in order to route traffic to the clients I guess, so is this even possible?
So - packet to an internet host from the client is supposed to go to the Astaro 320, then out again from firewall C.
Is this doable, or will I have a routing issue on the ASG 320 no matter what?