Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 5 subscribers
  • Views 1344 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSEC VPN with natting?

Mohamed Hassan

Hey Guys. Happy new year!

I need your advice with something that I'm trying to do. In short I have a site-to-site IPSEC VPN between 2 networks (in two sites), let's say network A & network B. What I want is there's a server in network B that I want it to reach another server but in network C. Obviously network C is not in the IPSEC networks so there's no tunnel for it. Is there any way that I can achieve this with NAT somehow? I want to do it this way rather than adding the whole C network into IPSEC VPN.

 

Cheers Mo



This thread was automatically locked due to age.
Parents
  • 0

    Hi Mo,

    I think you can just add the server in network C to the IPsec tunnel, but we don't know where network C is relative to the UTM connected to network A.  A diagram with devices with IPs would make this a simple question to answer specifically.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0

    Hi Mo,

    I think you can just add the server in network C to the IPsec tunnel, but we don't know where network C is relative to the UTM connected to network A.  A diagram with devices with IPs would make this a simple question to answer specifically.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • 0 in reply to BAlfson

    I guess it's not going to work for me. Basically I have site to site VPN from my Sophos to Azure. I have an Azure tenant from previous job using a MSDN subscription. Surprisingly even I left the job while ago the subscription and Azure stuff still active. Obviously my account was disabled so can't login to Azure to add any subnets to VPN. And now I created a new subnet at home that I want Azure accesses it but I guess there's no way I can achive this.

Unfiltered HTML