I have a TMG 2010 Server that acts as a 3-Leg Firewall (External, DMZ, Internal). I have 2 sets of remote VPN clients, both using separate subnets (One Staticly assigned IPs via AD, one handled through TMG/RRAS static pool). In both cases, my VPN subnet does not belong to ANY of my 3-Leg networks.
My question is due to the fact that twice over the past few weeks, the VPN clients are unreachable, both traffic from VPN clients to DMZ and DMZ to VPN clients. I will receive the "associated address does not belong to any of the interfaces on TMG" error. In both cases I have been able to resolve with a reboot.
So, in the case of having VPN clients on their own subnets, how and where should I add their subnets to the TMG interfaces?
