SNAT over IPSec XGS107-XG135

Question

Hello there, 
 
 I have 2 Sophos Firewall connecting to Networks with IPSeC Site-to-Site VPN 1 Public IP for each network. 
 XGS107 ( SFOS 19.5.3 MR-3-Build652) 
 XG135 ( SFOS 18.5.2 MR-2-Build380) 
 
 Network A 192.168.1.0/24 
 IPSeC gateway 172.16.21.1 
 Network B 10.10.10.0/24 
 IPSeC gateway 172.16.21.254 
 
 The concept is that we have one Server that is accessed only from Public IP from Network A and i want to access that Server from Network B, I assumed that SNAT is the solution but I am not aware of how to setup in Sophos. 
 
 Any suggestions they would be appreciated.

Dimitris Roubos · Accepted Answer

Thanks everyone for your ideas you helped me a lot, but as soon as i realised the concept i understood how to utilize the IPSeC connection. 
 Network B 
 I added a static route to the site's IP Address / gateway 172.16.21.254 / interface Network B to Network A 
 Network A 
 Then I added 2 firewall rules (1 for each directions) for allowing the site's IP Address is reachable.

Vivek Jagad · Answer

Hey Dimitris Roubos , Thank you for reaching out to the community, you may refer - Use NAT rules in an existing IPsec tunnel to connect a remote network .

SNAT over IPSec XGS107-XG135

Top Replies