topic Re: Source and Destination NAT for Site to site VPN in Next-Generation Firewall Discussions

Source and Destination NAT for Site to site VPN

dprakash_zatca — Wed, 18 Oct 2023 09:18:01 GMT

Hello,

I'm trying to configure a site-to-site vpn with between two organizations.

Our internal IP range is conflicting with the other organization network, so we are trying implement Source and Destination NAT

The VPN tunnel is up, but I'm struggling to NAT Source and Destination.

Route : 172.25.255.0/29 via Tunnel.50

The NAT policy Configured as below.

Tunnel Interface

Session Flow

Traffic Logs

Adriano_R94 — Fri, 20 Oct 2023 15:36:17 GMT

I have a similar problem but the NAT is on the client's peer.
We see traffic but access to hosts does not work.

Raido_Rattameister — Fri, 20 Oct 2023 16:43:27 GMT

Your traffic is not sent into tunnel because post-nat IP matches to your local subnet and it is routed to trust zone.

You should set up NAT on both sides by applying SNAT and DNAT for the traffic on both sides.