This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

problems with ipsec tunnel and traffic to it

Good morning;

I have been trying to do the following configuration for several days:

I have a local network of servers: 192.168.192.0/24

I have to connect to a remote network 10.48.48.96/27 with an ip of this range. to access other servers that are at 10.113.0.0

I mount the vpn tunnel and this is fine. But I can't get traffic to the web servers located in the range 10.113 ... from ips of my local network 192.168.192.x

They tell me that I have to do a nat to introduce me to their network with the ip 10.48.48.96/27 but it is impossible ... can you help me create the rules to access? Thank you

This thread was automatically locked due to age.

0 FormerMember over 5 years ago

Hi Ruflex

Thank you for reaching out to the Community!

You should be able to NAT local network with a 10.48.48.96 network, but if you have a same local network at the remote site, it will not work. Why don't you configure NAT on the peer firewall?

Check out the following KBA for more info: Sophos XG Firewall: How to apply NAT over a Site-to-Site IPsec VPN connection.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Ruflex over 5 years ago in reply to FormerMember

I test that configuration several times, since all the messages and searches took me there ... but something I do wrong or I don't know what it will be ... but it doesn't work for me in any way. Traffic in firewall rules is always zero

Thanx for your help
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 5 years ago in reply to Ruflex

Hi Ruflex

Could you please provide screenshots of the IPsec connection as well as the VPN firewall rules?

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Ruflex over 5 years ago in reply to FormerMember

First: thans for your help!

This is my configuration on vpn ipsec:

config in local network:

Config in remote network:

Ipsec tunel:

Rule out:

Rule In:

Firewall Rules:

Snat dont work, i can´t access to remote webserver... its imposible!
Cancel
Vote Up 0 Vote Down

Cancel