Forum Discussion

AndrewAdiUK's avatar
AndrewAdiUK
Icon for Nimbostratus rankNimbostratus
Aug 22, 2019

Machine Tunnels APM Policy

Hi All,

 

I am currently in the process of implementing a policy that contains Machine Tunnels and User Tunnels using the Edge Client. When starting the machine the Machine Tunnel starts successfully however once I login into the machine the Edge Client believes that it is connected to the corporate LAN and will not attempt to connect. This is because the network adapter has picked up the DNS suffix which is in the connectivity profile in Location DNS Name field. It appears that there is no way to tell the User Tunnel (via the Edge Client) to connect.

 

What need to be configured to allow the User Tunnel to begin?

 

Many thanks,

Andrew

BIG-IP Access Policy Manager (APM)
  • Dave_W's avatar
    Dave_W
    Icon for Employee rankEmployee
    Sep 11, 2019

    Hello, first I am not sure what you mean by "Machine Tunnels" and "User Tunnels." Your description of the "Machine Tunnels" sounds like WIndows Logon Integration where the Edge Client connects before the user is logged into Windows, is that correct? By "User Tunnel" do you mean the user manually connects with the Edge Client?

     

    If the DNS Suffix matches the internal network configured in the Location DNS then this sounds like it is working as intended:

     

    https://support.f5.com/csp/article/K07608215