Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 38 subscribers
  • Views 669 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSEC tunnel mode - is NAT Possible

BeEf

Hello,

wondering whether a tunnel based IPSEC VPN works with NAT on one (initiating) side.



What zone information needs to be provided on the Gateway host?



Is it required that the two XFRM interfaces can ping each other?



The configuration used to work when attached to direct internet interfaces. The tunnel seems to be activated and connected on both sides, FW Policies are in place but the data is not going through.

Remote Site initiating the connection (with NAT)



Central Site



If this is not working. Is there anything that can be done to get this running.

Regards,
BeEf



This thread was automatically locked due to age.
  • 0

    Hi BeEf

    Please check the packet capture for destination IP under Monitor and Analyze this might help you to check packet flow, from console check drop packet capture if static route are added. 

    Thanks and Regards

    "Sophos Partner: Networkkings Pvt Ltd".

    If a post solves your question please use the 'Verify Answer' button.

  • 0

    You can do a NAT. You cannot do a SNAT with "MASQ". Instead create a own IP. 

    __________________________________________________________________________________________________________________

Unfiltered HTML