Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 3387 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSec with PAT

MattMoenter
I'm fairly familar with setting up an IPSec VPN tunnel but its typically where I control both ends. Now I'm tasked with setting up a tunnel to a 3rd party vendor and they're requesting I use a PAT address (so all of our traffic appears to come from one address...10.20.30.45 for example). I've got our end of the tunnel set up matching their settings but where do I set up the PAT address? I'm guessing under local networks I'd create a 'fake' network (or host?) address? From there where do I tell our firewall to change any traffic to appear from that address?

Thanks in advance

Hardware on our end is SG210 running 9.315-2, not sure on remote end


This thread was automatically locked due to age.
  • 0
    You're close.  In the IPsec Connection, put a Host definition for 10.20.30.45 into 'Local networks' and do not select 'Strict routing'.  Create a NAT rule like 'SNAT : Internal (Network) -> Any -> {remote networks} : from {10.20.30.45}' and select auto firewall rules.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Thank you so much! It worked perfectly and the VPN connected without issue!
  • 0
    Rbb, you get a lot of credit for writing that initial post so clearly and for the thought you already had put into this.  It's a pleasure!

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Unfiltered HTML