Site to Site VPN and Sugar CRM

[sandsandeep]

Hi All

We are evaluating SugarCRM and landed up in the following situation

we have 2 sites of 10.0.10.X and 10,0.30.X segments users from 10.0.10.x can access the crm but the other segment never respond to port 80 apprecite if someone could guide us in setting up the access list am nt an expert in apache
it looks to me that we may hv to add the ip subment in to the trusted zone

correct me if am wrong

Thanks in Adv

Sandy

[stevec]

Sounds more like a networking issue - nothing to do with the web server (unless you have set up apache listening to one subnet only - see the apache config file(s))

[sandsandeep]

Hi Steve

i have not done any custom config as am a newbie to apache/ reson i mentioned about trusted ips
i have seen the similar isseu for iis 6

any configuration file ot confi you could let me know

would it be httpd.conf i will have to look in to any specific paramets you could think of

Thanks in Adv

Sandy

[stevec]

It depends on whicxh version of Apache you are using v1.* or v2.*

For v1, look in the httpd.conf/apache.conf (depending on distro) file. For v2, look in the the whole slew of config files - particularly the ports.conf file. However, by default, apache will allow connections from all (it's a webserver!)

More likely, there is a network config/routing/firewalling issue. If it's on a linux box, make sure it's listening on all subnets using the 'netstat -pant' command. Also check the /etc/hosts.allow and hosts.deny files in case they're catching it. In terms of routing, make sure the webserver can reverse route back to the other subnet. Just because 10.0.30.0 can route to 10.0.10.0 doesn't necessarily mean 10.0.10.0 can route back.

[rwebb616]

Hi All

We are evaluating SugarCRM and landed up in the following situation

we have 2 sites of 10.0.10.X and 10,0.30.X segments users from 10.0.10.x can access the crm but the other segment never respond to port 80 apprecite if someone could guide us in setting up the access list am nt an expert in apache
it looks to me that we may hv to add the ip subment in to the trusted zone

Can you give any additional details about your VPN? I.E. is it IPSEC, PPTP, Hardware/Software etc?

Rich

[jhamill]

Hi All

We are evaluating SugarCRM and landed up in the following situation

we have 2 sites of 10.0.10.X and 10,0.30.X segments users from 10.0.10.x can access the crm but the other segment never respond to port 80 apprecite if someone could guide us in setting up the access list am nt an expert in apache
it looks to me that we may hv to add the ip subment in to the trusted zone

correct me if am wrong

Thanks in Adv

Sandy

we have 5 locations doing a site to site vpn using sonicwalls to our sugarcrm server. works fine using private iP addresses

each is a different 192.168.x subnet.

I don't recall making any httpd changes, but I have turned off the firewall completely on our crm box since it's located behind a hardware firewall (2 actually).

are you able to ping the crm server from your remote locatations and vice versa.