Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 870 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

nat vpn

alekz
Is it possible with Astaro to make a VPN where both Gateways are natted behind a firewall?
Something like:

Lan -- SG -- FW -- Internet -- FW -- SG -- Lan

where:
SG = Secure Gateway (private IP)
FW = Firewall (NAT)

I read the VPN Masquerade How-To, where it seems possibile, patching the kernel and using ESP authentication instead of AH.
Any idea?


This thread was automatically locked due to age.
  • 0
    hi there, 

    this is a tough one, 
    actuelly i would say no it doesnt work.

    But you may have a change if you are using dyndns on both ends, have a router capable of natting esp and udp/500 correctly, you might have a chance setting up and ipsec vpn tunnel using the dyn dns name.

    Astaro does not support ipsec to FQDN (full qualified domain name) yet.

    So you won't get it up and running, but this is my opinnion, why don't give it a try?

    kind regards 
    polluxxx
Unfiltered HTML