Sample Header Ad - 728x90

Accessing an external webservice via VPN through NAT reflection times out

0 votes
1 answer
118 views
I have a Raspberry Pi 4B with Raspbian arm64 on it running a Strongswan VPN server alongside multiple services that I can access frow WAN via my external IP/my domain name. I use NAT reflection on my router so that I can use those same services from my LAN. The VPN routing seems to be working correctly, as I can access the internet and any devices on the LAN from any VPN device. Similarly, I can also ping any VPN device from my LAN. The problem arises when I try to access my web services via my domain name. The same services that I am normally able to access from both LAN and WAN are inaccessible for my VPN devices. If I forward a port of a different device on the LAN and try to access that on a VPN device via the domain name then that works just fine. As such, the routing and NAT reflection of my network setup both seem to be fine. It's only when I try to access websites hosted on the same server as the VPN via the domain name/external IP (accessing websites via the local IP works fine) that things don't work as expected. I conclude that something goes wrong on the routing side of things of my Raspberry Pi, however I am clueless as to where to begin debugging. As such, I'm not sure which configuration files would by useful to post here. I'll be happy to send any furter information that is necessary to help me solve this issue. My Strongswan config: conn ikev2-rsa auto=add compress=no type=tunnel keyexchange=ikev2 fragmentation=yes forceencaps=yes dpdaction=clear dpddelay=300s left=%any leftid=@example.com (this is set to my real domain name) leftcert=strongswan-cert.pem leftsendcert=always leftsubnet=0.0.0.0/0,::/0 right=%any rightid=%any rightauth=pubkey rightsourceip=10.2.1.0/24 rightdns=10.0.0.4 rightsendcert=never
Asked by Opisek (1 rep)
Aug 13, 2022, 06:50 PM
Last activity: Aug 14, 2022, 05:08 PM