Description

This article explains why certain websites may not be accessible to users connected through a VPN, while they remain accessible to LAN users.

Symptoms

  • Websites hosted on the internet are accessible to users on the local network (LAN).
  • The same websites are not accessible to users connected via JSC VPN.

Solution

Some websites restrict access based on source IP addresses and only allow connections from whitelisted IPs.
If LAN users and VPN users use different source NAT (SNAT) IP addresses, the VPN traffic may be denied by the website.
 

To resolve the issue, consider one of the following approaches:

  1. Update Website Whitelist

    • Add the NAT IP address used by VPN users to the website’s allowed (whitelist) IP list.

  2. Unify NAT Configuration

    • Configure VPN users to use the same NAT IP address as LAN users, ensuring consistent source IP visibility.

Modification History

2025-01-30 : Article Created