Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 14 replies
  • Answers 1 answer
  • Subscribers 41 subscribers
  • Views 2458 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

No Ping after DNAT

sebmoe

Hi folks,

I have the following problem:

I have an icinga 2 running in my network and I want it to ping a remote network via S2S.

This does work, but as soon as i create a DNAT with HTTP and HTTPS to my icinga, it stops working.

What i tried:

Set a permanent route through the IPSEC, made a roule to allow all ICMP traffic, made packet traces (my pings werde not even showing up, only the automatic ones fron icinga).

Is there some connection between DNAT an IPSEC? Does one exclude the other?

It's my first post here, so please let me know, if i missed something Slight smile

Greetings!



This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to sebmoe

    The system route for IPsec simply tells the firewall itself, there is a route for the traffic. This can be needed in case of NAT:

    But you NAT has a traffic selector based on Interface. I would recommend to try ANY there instead of Port2. 

    Check the Packet Capture as well. 

    __________________________________________________________________________________________________________________

Children
Unfiltered HTML