Hi there,
I'm currently trying to get a hold of all the different concepts and configurations of ziti, so apologies if I mix up anything.
I've setup two routers ('ad-ztna01' and 'fsn-ztna01') in different networks. Both with "isTunnelerEnabled": true and "noTraversal": false.
ad-ztna01 is unused here I guess.
My goal is to access this smb2 share on 'u123456.your-storagebox.de' with the windows client from the network of 'fsn-ztna01' (as the share is only reachable on the local network of fsn-ztna01).
A capture with wireshark on ziti-tun0 interface on the windows client shows traffic with questionable source and destination addresses.
I see a DNS query from 99.23.0.1 to 99.23.0.2 and get a reply with an A record to 99.23.0.4 while the true public IP of u123456.your-storagebox.de is 99.23.0.3.
There are packets going on port 139 and 445 but I'm unsure if they pass thru.
All IP addresses are fictitious.
I'm unsure what else I could look on.
I've setup an windows tunneler client with an identity and assigned the role 'storageboxes' to it.
I've created a service storageboxes.svc with configurations 'storageboxes.host.v1', 'storageboxes.intercept.v1' and service policy 'storageboxes.policy.dial' as well as a service-edge-router-policy 'storageboxes.policy.bind'.
{
"name": "storageboxes.host.v1",
"configTypeId": "NH5p4FpGR",
"data": {
"allowedAddresses": [
"u123456.your-storagebox.de"
],
"allowedPortRanges": [
{
"high": 445,
"low": 445
},
{
"high": 139,
"low": 139
}
],
"forwardAddress": true,
"forwardPort": true,
"protocol": "tcp"
}
}
{
"name": "storageboxes.intercept.v1",
"configTypeId": "g7cIWbcGg",
"data": {
"addresses": [
"u123456.your-storagebox.de"
],
"portRanges": [
{
"high": 445,
"low": 445
},
{
"high": 139,
"low": 139
}
],
"protocols": [
"tcp"
]
}
}
{
"name": "storageboxes.policy.dial",
"appData": "",
"serviceRoles": [
"@1hCiDTGYDQY1nX5OqI3j9P"
],
"identityRoles": [
"#storageboxes"
],
"postureCheckRoles": [],
"semantic": "AllOf",
"type": "Dial"
}
{
"name": "storageboxes.policy.bind",
"appData": "",
"edgeRouterRoles": [
"@HbKI.e4YRs"
],
"serviceRoles": [
"@1hCiDTGYDQY1nX5OqI3j9P"
],
"semantic": "AllOf"
}
I would appreciate any help, thank you!
