This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSEC VPN with natting?

Hey Guys. Happy new year!

I need your advice with something that I'm trying to do. In short I have a site-to-site IPSEC VPN between 2 networks (in two sites), let's say network A & network B. What I want is there's a server in network B that I want it to reach another server but in network C. Obviously network C is not in the IPSEC networks so there's no tunnel for it. Is there any way that I can achieve this with NAT somehow? I want to do it this way rather than adding the whole C network into IPSEC VPN.

Cheers Mo

This thread was automatically locked due to age.

0 Jaydeep over 4 years ago

Hi Mohamed Hassan

You can create an IPsec tunnel between a host to host in Network B and C if you want. You just need to make sure that you specify the /32 netmask in network host definition.

Regards

Jaydeep
Cancel
Vote Up 0 Vote Down

Cancel
0 Mohamed Hassan over 4 years ago in reply to Jaydeep

Thanks for your response as usual Jaydeep. Other than creating another IPsec tunnel there's no other way around it?
Cancel
Vote Up 0 Vote Down

Cancel
0 Jaydeep over 4 years ago in reply to Mohamed Hassan

If both devices are Sophos Firewall, you may use Site to Site SSL VPN as well.

Regards

Jaydeep
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 4 years ago

Hi Mo,

I think you can just add the server in network C to the IPsec tunnel, but we don't know where network C is relative to the UTM connected to network A. A diagram with devices with IPs would make this a simple question to answer specifically.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Mohamed Hassan over 4 years ago in reply to BAlfson

I guess it's not going to work for me. Basically I have site to site VPN from my Sophos to Azure. I have an Azure tenant from previous job using a MSDN subscription. Surprisingly even I left the job while ago the subscription and Azure stuff still active. Obviously my account was disabled so can't login to Azure to add any subnets to VPN. And now I created a new subnet at home that I want Azure accesses it but I guess there's no way I can achive this.
Cancel
Vote Up 0 Vote Down

Cancel