How to Make VPN Clients Use NGAF WAN IP for Internet Access?

Newbie758586 Lv1Posted Feb-27-2025 16:07

Hello everyone,

I have a Sangfor NGAF and Sangfor WGAF setup, where VPN clients connect through WGAF and receive IPs like 2.0.1.1. However, when they access the internet, they use a different public IP instead of the NGAF WAN IP.

I want to configure NGAF so that all VPN clients use the NGAF WAN IP (e.g., 203.150.50.10) when browsing the internet.

Current setup:

VPN clients get IPs in 2.0.1.0/24 subnet.
NGAF WAN IP: 203.150.50.10
VPN works fine, but clients go out with another public IP.
How can I configure NGAF to perform NAT for VPN clients so they use the NGAF WAN IP for internet access?

Any help would be appreciated! Thank you.

FGentili has solved this question and earned 10 coins.

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

Hi, which resources have you defined??
I think you need to define all ipv4 public subnet and setup nat rules

something like this
1.0.0.0-9.255.255.255
11.0.0.0-100.63.255.255
100.128.0.0-126.255.255.255
128.0.0.0-169.253.255.255
169.255.0.0-172.15.255.255
172.32.0.0-191.255.255.255
192.0.1.0/24
192.0.3.0-192.88.98.255
192.88.100.0-192.167.255.255
192.169.0.0-198.17.255.255
198.20.0.0-198.51.99.255
198.51.101.0-203.0.112.255
203.0.114.0-223.255.255.255
Is this answer helpful?
FGentili Lv1Posted Mar-05-2025 19:31
  
Hi, which resources have you defined??
I think you need to define all ipv4 public subnet and setup nat rules

something like this
1.0.0.0-9.255.255.255
11.0.0.0-100.63.255.255
100.128.0.0-126.255.255.255
128.0.0.0-169.253.255.255
169.255.0.0-172.15.255.255
172.32.0.0-191.255.255.255
192.0.1.0/24
192.0.3.0-192.88.98.255
192.88.100.0-192.167.255.255
192.169.0.0-198.17.255.255
198.20.0.0-198.51.99.255
198.51.101.0-203.0.112.255
203.0.114.0-223.255.255.255
AR Lv2Posted Mar-06-2025 15:25
  
Hello,
Could you please specify which resources?
I believe you must put up NAT rules and define every IPv4 public subnet.
Something along these lines
1.0.0.0-9.255.255
11.0.0.0-100.63.255.255
128.0.0.0-169.253.255.255
169.255.0.0-172.15.255.255
172.32.0.0-191.255.255
192.0.1.0/24
190.20.3.0-192.88.98.255
192.88.0.0.0-198.17.255.255
198.51.101.0-203.0.112.255
203.0.114.0-223.255.255.255

I Can Help:

Change

Board Leaders