Sie-to-Site / Nating

Hi Oliver Gekeler1,

Thank you for reaching out to Sophos Community.

What are the child SAs configured in IPsec tunnel (Local subnet & Remote subnet)?

SNAT would not be required as you have done NATing in tunnel configuration.

Please ensure that it is configured with local subnet 172.28.206.xx and remote subnet 10.13.47.xx

Configure Network Address Translation(NAT) as below.

THX
my customer gave me as remote subnet 10.13.44.0/26
He told he will forward internal the IP 10.13.47.65
That's the reason I make SNAT from 192.168.2.xx to 10.13.47.65

but the he still receives 192.168.2.xx

One more information and the solution we did!

We use the XG106w Applaiance with SFOS 18.0.4 MR-4

We use the PORT 1 as bridge.
In this case you need to configure the NATING via console!!!
This is not a feature for me it's a buck!!

And also you need the SNAT!

Now it works!

One more information and the solution we did!

We use the XG106w Applaiance with SFOS 18.0.4 MR-4

We use the PORT 1 as bridge.
In this case you need to configure the NATING via console!!!
This is not a feature for me it's a buck!!

And also you need the SNAT!

Now it works!