Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 27 subscribers
  • Views 2414 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Problem with NAT over ipsec tunnel

Waleed

Hi,

 

I have IPSEC tunnel to corporate office and 2 sunbets on the xg firewall when nat between the 2 subnets 172.18.x.x and 10.16.x.x then i can get what i want, but i have a printer on 172.18.x.x subnet when do the nat can ping it across the tunnel but cannot print to it across the tunnel

Happening in multiple locations with the same issue.

Regards



This thread was automatically locked due to age.
Parents
  • 0

    Can you draw a little map? 

    NAT in IPsec can become tricky. 

    (from the XG perspective): SNAT will be performed in the IPsec Configuration.

    DNAT will be performed in the Firewall Page. 

     

    What do you want to do? 

  • 0 in reply to LuCar Toni

    IPSEC -----> 172.18.X.X ----> printer

    10.16.X.X Network Subnet

    if NAT 172.18.X.X to 10.16.x.x ----> i can get over to IPSEC

    Printer on 172.18.X.X ---> cannot access IPSEC anymore

     

    i need to do both functions using IPSEC NAT

     

    thanks

  • 0 in reply to Waleed

    Still not 100% clear.

     

    So you have a local Network, you have a remote network and optional a NAT Network (SNAT).

     

    Local Network - XG - IPsec Tunnel - Other Device - remote Network. 

     

    In Case of SNAT, you would replace "Local Network" with a "Fake Network (called NAT Network)". 

     

Reply
  • 0 in reply to Waleed

    Still not 100% clear.

     

    So you have a local Network, you have a remote network and optional a NAT Network (SNAT).

     

    Local Network - XG - IPsec Tunnel - Other Device - remote Network. 

     

    In Case of SNAT, you would replace "Local Network" with a "Fake Network (called NAT Network)". 

     

Children
  • 0 in reply to LuCar Toni

    I have 2 networks on the XG a 10.16.0.0 and a 172.18.0.0

    the IPSEC connects over the 172.18.0.0

    the local subnet to access resources over the ipsec tunnel since it is not allowed to go over the ipsec tunnel i have to NAT the 172.18.0.0 to 10.16.0.0

    everything is working and i can access all required resources

    one thing that i have if i want to use any device on the 172.18.0.0 network it does not find its way back to the tunnel as the XG thinks it is NATed over to 10.16.0.0 network.

    Thank you for assistance.

  • 0 in reply to Waleed

    Sorry Waleed,

    still confusing. Can you share a network diagram? Also on XG, please share network interface tab screenshot.

    Thanks