NAT into remote VPN network

Hi,

your VPN is a zone, so your VPN connection should use zone VPN.

Ian

Thanks for reply,

I've no idea what you want me to do.

All VPN's (there are many configured) are in the zone VPN and routing to a zone is not possible...

intention is to hide local 172.16.0.0/16 network for remote site

source ip's from 172.16.0.0/16 should be NATed. On this dedicated remote site all NATed traffic should come from source 172.20.0.200/32.

Hi,

you should follow this KBA:

https://community.sophos.com/kb/en-us/123356

Basically you need an /32 Object as a SA in the IPsec tunnel and press "NAT" in the ipsec config. 

Dont forget to "publish" the /32 SA to the other site of the connection. 

Hi,

you should follow this KBA:

https://community.sophos.com/kb/en-us/123356

Basically you need an /32 Object as a SA in the IPsec tunnel and press "NAT" in the ipsec config. 

Dont forget to "publish" the /32 SA to the other site of the connection.