Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 27 subscribers
  • Views 1061 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNAT through IPSEC Tunnel

Joshua Antl

Hi out there,

I am looking for some help and would appreciate any ideas on my problem. 

Site A (Head):

Internal IP: 192.168.4.0 /24

External IP: 1.1.1.1

Site B (Branch):

Internal IP: 192.168.101.0 /24

External IP: 2.2.2.2

Server IP: 192.168.101.10

I am using two XG Firewalls. One in our head office and one in branch office.  Both sites are connected via a Ipsec Site to Site VPN. (No NAT configured). Both sites are able to reach each other internaly.

Now i am trying to access my Webserver on site B (192.168.101.10) via Sites A External IP Adress. As far as i read this should be possible, but probably i am doning something very wrong.

 

I configured a DNAT rule on site A with accordingly ports pointing to my Server on site B.

As far as I understood i would have to configure Full NAT for that but i also read it would need a ipsec route. So i am some kind of confused

any help would be appreciated



This thread was automatically locked due to age.
Parents
  • 0

    Hi Philipp,

    Thanks for that Input. I changed my settings to full nat and added system ipsec_route add host 192.168.101.10 tunnelname Test123 on CLI. I am now able to connect but i am still having some issues with the replys of that server.

Reply
  • 0

    Hi Philipp,

    Thanks for that Input. I changed my settings to full nat and added system ipsec_route add host 192.168.101.10 tunnelname Test123 on CLI. I am now able to connect but i am still having some issues with the replys of that server.

Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?