This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Newbie Question- Site to site

I have setup the connection for a site to site vpn. My question is what kind of NAT rules do I need. My setup is:

I have two interfaces - internal and external. I have two static ip's on the external (1 for the tunnel)

net1 > net2 masq on internal (should that be external)
net2 > net1 masq on internal (same question)

Packet filter rules

net1 any net2
net2 any net1

Is this wrong? Any help would be appreciated. Thanks

This thread was automatically locked due to age.

Parents

0 notoriousiroc over 19 years ago

Also, you do not need to manually add the packet filter rules if you turn on the Auto Packet Filter option.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 notoriousiroc over 19 years ago

Also, you do not need to manually add the packet filter rules if you turn on the Auto Packet Filter option.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 ximianrevolution over 19 years ago in reply to notoriousiroc

Probably because he read the online resource or the book. This is what it's written-
"Additional Notes For Site-to-Site VPN:

1) There is no need for any route to be put in place as this is done automatically by the Astaro.
2) You will need packet filters in order for traffic to flow from network to network.
3) You should have a masquerading rule, not an SNAT rule, which masks all internal traffic, making it appear as the external interface. An SNAT rule will cause the tunnel not to work properly."
Cancel
Vote Up 0 Vote Down

Cancel