Forum Discussion

sameh_atef_2110's avatar
sameh_atef_2110
Icon for Cirrus rankCirrus
Feb 17, 2016

APM Network Access issue

Hi,

 

i have a network access resource that is assigned to a user. i need the user to be able to resolve this : mywebpage as i configured this as a webtop link and he can't access it. also, the webtop link can't be configured by IP as the application doesn't allow that.

 

I tried to add a static host in the network access but still can't resolve mywebpage or ping it. i tried to add it manually in hosts file in the user windows but still can't access it.

 

any idea how to solve that ?

 

BIG-IP Access Policy Manager (APM)
security

3 Replies

  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Historic F5 Account
    Feb 17, 2016

    It's not clear where you are in the troubleshooting process. Can you clarify?

     

    • Is everything working except DNS?
    • Is DNS working but not the HTTP connection?
    • Does the Network Access tunnel connect successfully?
    • Does traffic egress the client into the tunnel?

    Details are critical when trying to troubleshoot computer networking issues.

     

    • sameh_atef_2110's avatar
      sameh_atef_2110
      Icon for Cirrus rankCirrus
      Feb 17, 2016
      yes everything is working fine. i can ping 1.1.1.1. But' as you see i tried to add this in network access as a static host mywebpage : 1.1.1.1. then tried nslookup mywebpage from cmd with no result. tried also to add dns but still can't resolve the mywebpage. and i can reach dns server after starting the network access.
    • Lucas_Thompson_'s avatar
      Lucas_Thompson_
      Historic F5 Account
      Feb 17, 2016
      In windows, the F5 VPN client will attempt to assist Windows in name resolution by: 1- Setting the DNS server on the Network Access VPN adapter OR the main network adapter, depending on if you have "Enforce DNS Search Order" enabled or not in the NA resource. 2- Using the DNS Relay Proxy (it's an optional F5 Windows system service you can start/stop) to proxy client's DNS requests. You will want to try to stop this service and/or start it, depending on if split-routing is set up or not and if you're using split-DNS or not, and/or how you want the client to behave. 3- If 2 fails and the current user has admin permission, it will try to add host entries. How Windows does DNS (what settings are used, what adapter, routing, fallback options, precedence, etc) is a bit complicated. To understand it, it's best to look at the Microsoft article on the topic: https://technet.microsoft.com/en-us/library/cc772774%28v=ws.10%29.aspx Using the commands like ipconfig /all , etc, you can easily see what settings are being pushed by the client into Windows and follow along with the client sections of that document.