remote connect with vpn

Sam Irlapati samirlapati at gmail.com
Sat Jul 4 16:06:28 UTC 2015


Hi Everyone,

I hope you guys can help me out with what i am trying to accomplish.

I have the following config

[root at Router log]# firewall-cmd --get-active-zones
VPN
   interfaces: tun0
external
   interfaces: p2p1
internal
   interfaces: p6p1
[root at Router log]# firewall-cmd --zone=VPN --list-all
VPN (active)
   interfaces: tun0
   sources:
   services:
   ports:
   masquerade: yes
   forward-ports:
   icmp-blocks:
   rich rules:

[root at Router log]# firewall-cmd --zone=external --list-all
external (active)
   interfaces: p2p1
   sources:
   services: http https ssh
   ports: 2012/tcp
   masquerade: yes
   forward-ports: port=2082:proto=tcp:toport=22:toaddr=192.168.13.108
     port=2072:proto=tcp:toport=22:toaddr=192.168.13.107
     port=5000-5020:proto=tcp:toport=5000-5020:toaddr=192.168.13.104
     port=2052:proto=tcp:toport=22:toaddr=192.168.13.105
     port=2092:proto=tcp:toport=22:toaddr=192.168.13.109
     port=2042:proto=tcp:toport=22:toaddr=192.168.13.104
     port=2062:proto=tcp:toport=22:toaddr=192.168.13.106
     port=5000-5020:proto=udp:toport=5000-5020:toaddr=192.168.13.104
     port=2022:proto=tcp:toport=22:toaddr=192.168.13.102
   icmp-blocks:
   rich rules:

[root at Router log]# firewall-cmd --zone=internal --list-all
internal (default, active)
   interfaces: p6p1
   sources:
   services: Viber dhcp dhcpv6-client dns google-services hangouts http 
https ipp-client mdns samba-client ssh vnc-server
   ports: 2032/tcp 3126/tcp 3127/tcp 8080/tcp 10000/tcp 3128/tcp
   masquerade: no
   forward-ports:
   icmp-blocks:
   rich rules:

[root at Router log]#


When VPN is not connected i am able to connect from a remote location 
because of all the port forwardings that are defined in the external 
zone. When the VPN is connected, they dont work. I was wondering if any 
of you could help me out to get the port forwarding in the external zone 
to work even when VPN is connected.

sam


More information about the firewalld-users mailing list