This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Making Tunnel through a router using internal adr

I'm trying to setup a VPN between an ASL having a external adress (i.e. public) and another one having an internal adress (RFC1918) placed behind a router with a single IP address. I used a NAT at the router to send all the frames coming to its external adress to the Firewall adress. For PINGing, using SSH or HTTPS, it works fine.
When trying to setup a tinnel, it doesn't work. I had such problems in the past with teh same diagnosis: both parts of a tunnel must have the same LAN and endpoint defined. I did using using a NAT rule first and then, using an asymtric definiton but..no way !! I need to build my VPN by Monday !! HELP.

This thread was automatically locked due to age.

Parents

0 Moby over 21 years ago

VPNs will not function through a NAT without using some form of NAT Traversal (NAT-T, UDP encapsulation, etc). Astaro supports NAT traversal, but I do not know if you can use it with a site-to-site VPN. I have only ever used it with RoadWarrior type VPNs. Usually VPN devices assume that if you are creating a site-to-site VPN that both sides have a static, non-NAT IP address, but Astaro may be different.

Perhaps someone else has used NAT-T with a site-to-site VPN and can give you some pointers.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Moby over 21 years ago

VPNs will not function through a NAT without using some form of NAT Traversal (NAT-T, UDP encapsulation, etc). Astaro supports NAT traversal, but I do not know if you can use it with a site-to-site VPN. I have only ever used it with RoadWarrior type VPNs. Usually VPN devices assume that if you are creating a site-to-site VPN that both sides have a static, non-NAT IP address, but Astaro may be different.

Perhaps someone else has used NAT-T with a site-to-site VPN and can give you some pointers.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data