This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Astaro Noob with NAT issues

I know this question has been asked before, in fact I've read through probably all of them but I am still having issues with this since I am new to Astaro ...

I have a client I've created a IPSEC Site-Site VPN tunnel for. It connects and works just fine with one of my networks. Unfortunately, the network I need this VPN to work through overlaps (IP addresses) with mine. As I understand it, SNAT/DNAT is the way to resolve this but what I have done so far is not working. I need to be able to use RDP from my site to connect to the clients site.

My info:

ASG 8.305

My LAN
10.11.0.0

Client LAN addresses I need to access
10.10.102.211---213 & 10.10.100.244

Any help is appreciated ...

This thread was automatically locked due to age.

Parents

0 BAlfson over 13 years ago

There's a possible easy solution if we know the subnets are not 10.0.0.0/8 on both sides. If they are, then you need an SNAT on your side and a DNAT on the other side for each server you need to reach. Plus, you need a "phantom" subnet on each side to establish the VPN. See How to tunnel between two ASGs having the same LAN network range .

Give it a try and come back with pictures of what seems to not work.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 MiamiTJ over 13 years ago in reply to BAlfson

There's a possible easy solution if we know the subnets are not 10.0.0.0/8 on both sides. If they are, then you need an SNAT on your side and a DNAT on the other side for each server you need to reach. Plus, you need a "phantom" subnet on each side to establish the VPN. See How to tunnel between two ASGs having the same LAN network range .

Give it a try and come back with pictures of what seems to not work.

Cheers - Bob

Whats the possible "easy" solution?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 MiamiTJ over 13 years ago in reply to BAlfson

There's a possible easy solution if we know the subnets are not 10.0.0.0/8 on both sides. If they are, then you need an SNAT on your side and a DNAT on the other side for each server you need to reach. Plus, you need a "phantom" subnet on each side to establish the VPN. See How to tunnel between two ASGs having the same LAN network range .

Give it a try and come back with pictures of what seems to not work.

Cheers - Bob

Whats the possible "easy" solution?
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 MiamiTJ over 13 years ago in reply to MiamiTJ

BAlfson,

Im looking at the example you linked but I am having trouble applying it to my needs.

In my case, I need multiple PC's on my network to be able to RDP into a single, individual terminal services server on the clients network. The client will not be accessing anything on my network.

How can I make this example fit?
Cancel
Vote Up 0 Vote Down

Cancel