Accessing an external webservice via VPN through NAT reflection times out
0
votes
1
answer
118
views
I have a Raspberry Pi 4B with Raspbian arm64 on it running a Strongswan VPN server alongside multiple services that I can access frow WAN via my external IP/my domain name. I use NAT reflection on my router so that I can use those same services from my LAN. The VPN routing seems to be working correctly, as I can access the internet and any devices on the LAN from any VPN device. Similarly, I can also ping any VPN device from my LAN.
The problem arises when I try to access my web services via my domain name. The same services that I am normally able to access from both LAN and WAN are inaccessible for my VPN devices. If I forward a port of a different device on the LAN and try to access that on a VPN device via the domain name then that works just fine. As such, the routing and NAT reflection of my network setup both seem to be fine. It's only when I try to access websites hosted on the same server as the VPN via the domain name/external IP (accessing websites via the local IP works fine) that things don't work as expected.
I conclude that something goes wrong on the routing side of things of my Raspberry Pi, however I am clueless as to where to begin debugging. As such, I'm not sure which configuration files would by useful to post here. I'll be happy to send any furter information that is necessary to help me solve this issue.
My Strongswan config:
conn ikev2-rsa
auto=add
compress=no
type=tunnel
keyexchange=ikev2
fragmentation=yes
forceencaps=yes
dpdaction=clear
dpddelay=300s
left=%any
leftid=@example.com (this is set to my real domain name)
leftcert=strongswan-cert.pem
leftsendcert=always
leftsubnet=0.0.0.0/0,::/0
right=%any
rightid=%any
rightauth=pubkey
rightsourceip=10.2.1.0/24
rightdns=10.0.0.4
rightsendcert=never
Asked by Opisek
(1 rep)
Aug 13, 2022, 06:50 PM
Last activity: Aug 14, 2022, 05:08 PM
Last activity: Aug 14, 2022, 05:08 PM