PBVPN / RBVPN

Question

Hi, 
 
 Why MASQ is required to w.r.t PBVPN / RBVPN to configured in SNAT ? 
 To my understanding is that if I am connecting IPSEC of type mentioned, the packet does not required to be changed (MASKED) since the packet is on IPSEC S2S. My thinking is that if it would have to in internet then it would might require MASQ but in these case ? 
 Also many a times I have faced a question that NAT rule is only configured if there are more then 1 network, is it ? For single network NAT rule not required to be configured. 
 Please explain.

emmosophos · Accepted Answer

Hello Manish, 
 As Luca mentioned, it would depend on your deployment, usually, when people use NAT within the tunnel is either their subnets are overlapping with the other site, or the other site just wants to see the traffic arriving at it with a specific subnet. 
 In most cases where you use Masquerading, it means the endpoint (receiving the Ping) only replies to packets within its same subnet. 
 Regards,

LuCar Toni · Answer

You do not need NAT in any terms in IPsec. You can do this, if needed for certain deployments, but it is not required.

PBVPN / RBVPN

Top Replies

Submitted a Tech Support Case lately from the Support Portal?