IPSEC TUNNEL MASQUERADING PROBLEME

Hi Franz-Josef Heidkamp 

I would advise you to check this KBA for more info: Sophos XG Firewall: How to apply NAT over a Site-to-Site IPsec VPN connection.

You could configure SNAT in firewall rule LAN to VPN and change source IP as required. 

Thanks,

Hi Franz-Josef Heidkamp 

I would advise you to check this KBA for more info: Sophos XG Firewall: How to apply NAT over a Site-to-Site IPsec VPN connection.

You could configure SNAT in firewall rule LAN to VPN and change source IP as required. 

Thanks,

Hi H_Patel,

thanks for your support and your tip, i fond this Video https://www.youtube.com/watch?v=HwrZ4HZD8xQ 
I will try it tomorrow and hope it will help. I know the KBA but i think this is not the solution i need.

Thanks 

Hello,

i set up SNAT, but the traffic out dont use the Tunnel 0 Interface.
IT´s only wants WAN Interface, but that is the wrong way.

Snat is someting Terrile.

Thanks in Advance

Hi Franz-JosefOtte 

What is the IP address you have configured with SNAT rule? It must be an internal IP that is part of the IPsec tunnel. 

Please post a screenshot of the rule.

Thanks,

Hi  

i talked today to my German Support, and i think i must Update my 17.5 MR 11-12 to the Version 18 MR-1 in a few Weeks.
My Firewall is an Azure Deploy and i must Deploy an new VM for Update.

My fault was i wanted to use the "Route Based VPN" and this Method dont work correctly on V17.5 MR 11-12.

Thank you for your Support

Actually: I am not in German Support ;) 

Route Based is a new feature in V18. So "Dont work correctly" is not true.