This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VPN IPSEC with NAT between networks - Routing does not work

 This is the topology

 

I have this topology working with UTM9. I made the same configuration in SFOS 16.05.8 MR-8, but it does not work! And it's a very simple VPN configuration with NAT.

VPN Configuration:
Firewall A:
Local Network: 10.174.5.192/26
Remote Network: 10.174.220.0/22
                             10.174.224.0/22
                             10.174.228.0/22
                              10.112.118.61/32


I configured the nat in the firewall rules with "Rewrite source address (Masquerading)" to do NAT with the source IPs.

Rule -> Source "real IP - 192.168.0.0/24", any service, to destination "REMOTE IP - 10.174.220.0/22, make source NAT for" 10.174.5.193 ".

VPN goes up both phases, but traffic does not work! In packet capture, I see incoming traffic but it is not sent over the VPN.

I also made the route CLI configuration:

system ipsec_route add host 10.174.220.0/255.255.252.0 tunnelname VPN_TEC

With this route I already see the traffic being sent, but it still does not work.

Is this route really necessary? Or should I do some other configuration? This configuration is simple, I've done it in several firewalls and I've never had a problem.



This thread was automatically locked due to age.
Parents Reply Children
No Data