Forum Discussion

Jonathon_Page's avatar
Jonathon_Page
Icon for Nimbostratus rankNimbostratus
Oct 26, 2016

Internet access on F5 VPN with SNAT and split-tunnel disabled

Hi. I'm relatively new to the F5 environment, and we have a 4200 appliance set up to provide remote access services. We deployed a VPN profile and connect using the Edge client and local access is fine, but internet access is not. We managed to get internet working using a local proxy server, but that didn't work for non-standard ports (other than 80 and 443).

 

In doing some research it looks like without the proxy server, the internet traffic is trying to go out through the outside interface (which is blocked) and not the inside interface and based on the way the routing table is configured, this behavior is correct.

 

I come from the Cisco AnyConnect VPN world where we would use Policy Based Routing, I've searched and found multiple articles, but nothing clear. Some talk about using Virtual services instead of static routes but being a new to the F5 this is something that I've not had any experience.

 

Any Configuration guides or samples that anyone can provide would be appreciated.

 

Thanks

 

1 Reply