Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 1396 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNAT of IPSec traffic problem

bpopov
172.25.0.117 


This thread was automatically locked due to age.
Parents
  • 0
    Bob,

    The below may offer you a better idea of what we're thinking of doing. There are a couple of uplinks on local end and we wanted HOST_B (192.168.5.1) to be accessible via distinct PUB_IPs from the remote end, one for each link, the software knows to try both if either is unavailable. Any feedback is greatly appreciated. 

        HOST_A           PUB_IP         GW_IP                     GW_IP           PUB_IP            HOST_B

    

    (172.25.0.117) - 60.67.25.117 - 60.67.56.147 - TUNNEL A -  98.97.182.82  -  98.97.182.89   - (192.168.5.1)

    (172.25.0.118) - 60.67.25.118 - 60.67.56.147 - TUNNEL A -  98.97.182.82  -  98.97.182.89   - (192.168.5.1)

    

    (172.25.0.117) - 60.67.25.117 - 60.67.56.147 - TUNNEL B - 203.130.128.98 - 203.130.128.101 - (192.168.5.1)

    (172.25.0.118) - 60.67.25.118 - 60.67.56.147 - TUNNEL B - 203.130.128.98 - 203.130.128.101 - (192.168.5.1)
Reply
  • 0
    Bob,

    The below may offer you a better idea of what we're thinking of doing. There are a couple of uplinks on local end and we wanted HOST_B (192.168.5.1) to be accessible via distinct PUB_IPs from the remote end, one for each link, the software knows to try both if either is unavailable. Any feedback is greatly appreciated. 

        HOST_A           PUB_IP         GW_IP                     GW_IP           PUB_IP            HOST_B

    

    (172.25.0.117) - 60.67.25.117 - 60.67.56.147 - TUNNEL A -  98.97.182.82  -  98.97.182.89   - (192.168.5.1)

    (172.25.0.118) - 60.67.25.118 - 60.67.56.147 - TUNNEL A -  98.97.182.82  -  98.97.182.89   - (192.168.5.1)

    

    (172.25.0.117) - 60.67.25.117 - 60.67.56.147 - TUNNEL B - 203.130.128.98 - 203.130.128.101 - (192.168.5.1)

    (172.25.0.118) - 60.67.25.118 - 60.67.56.147 - TUNNEL B - 203.130.128.98 - 203.130.128.101 - (192.168.5.1)
Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?

Unfiltered HTML