IPSEC to IPSEC Tunnel - Subnetting NAT Problem/Question

Hello Patrick Merkel,

Greetings!

You may review below KBA, that may help with your requirement:

https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/VPN/SiteToSiteVPN/VPNConfigureSiteToSiteIPsecNAT/index.html#sophos-firewall-2-add-ipsec-connection

Happy to help!

Regards,

Mayur Makvana

thanks that helps. I got 2 more questions.

1. Is there any special when i only need to adress a single ip and not a network?

2. The local IP where is needed, is in a vlan

Hello Patrick Merkel,

If Ipsec tunnel is for host to network then single IP NAT will also work ( inside IPsec tunnel settings).

But If ipsec tunnel is network to network then NATed LAN with another fake network should be used. 

As far as it is having connectivity to the Firewall, there is no specific need of any changes for the vlan network. 

Regards,

Mayur Makvana

Hello Patrick Merkel,

If Ipsec tunnel is for host to network then single IP NAT will also work ( inside IPsec tunnel settings).

But If ipsec tunnel is network to network then NATed LAN with another fake network should be used. 

As far as it is having connectivity to the Firewall, there is no specific need of any changes for the vlan network. 

Regards,

Mayur Makvana