Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall

Discussions NAT Remote Access VPN IP to internal IP

Sophos Firewall requires membership for participation - click to join

Thread Info

State Suggested Answer
Locked Locked
Replies 3 replies
Answers 2 answers
Subscribers 40 subscribers
Views 1702 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

NAT Remote Access VPN IP to internal IP

Werner Smit over 1 year ago

Good Day,

Our Remote Access SSL VPN IP's are on a different subnet.

Is there a way I can NAT it to our Internal IP's?

Currently they get 10.81.234.x/24

Would like to NAT the IP to 10.0.0.x/16

This thread was automatically locked due to age.

0 emmosophos over 1 year ago

Hello Werner,

Thank you for contacting the Sophos Community.

You can follow this RR, which follows the same idea of changing the IP of the SSL VPN as it comes into the Sophos Firewall.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 dirkkotte over 1 year ago

Do you tried it ... and it didn't work?

i would start masquerading all RAS-IP's behind the LAN interface-IP.

If you need the other direction (LAN-to-RAS) 1:1 NAT may be an option ... you need matching address-ranges.

Maybe a problem mixing these addresses with working LAN-IP's

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Cancel
0 Werner Smit over 1 year ago in reply to dirkkotte

Hi emmosophos dirkkotte

Thank you both for the insights.

So please correct me if I am wrong. I want to do the following.

NAT:

VPN Pool (10.81.234.x/24) to VPN-Test (10.0.11.0/24)

Only to give them the same IP's as within the 10.0.0.0/16 network range. We have open IP's at 10.0.11.0/24 range
Cancel
Vote Up 0 Vote Down

Cancel