topic Re: NAT without braking current IPSec in General Topics

NAT without braking current IPSec

mike.07 — Thu, 13 Oct 2022 18:14:37 GMT

Hi All,

Need some help regarding my dilemma.

IPsec tunnel between Site A and Site B.

Static route for this tunnel is setup to forward traffic to only on subnet (10.100.x.x).

I am working on updating patches on server that is under Site A.

I need a solution to allow traffic from internet site to the server IP that is on Site A.

is there a NAT policy that i can deploy which will not break the connection with IPsec but will allow traffic from outside to the server's IP?

Thank you for your help.

JayGolf — Tue, 18 Oct 2022 02:36:03 GMT

Are you looking for a NAT rule to allow public access to the public IP of the server?

DavePalo — Tue, 18 Oct 2022 21:21:19 GMT

Hi @mike.07, it would be useful if you could provide a little more info on your setup - or a diagram please.

Finding it hard to visualise what you are trying to do.

Thanks,

Dave

Rfetiti — Wed, 19 Oct 2022 01:33:13 GMT

Hello

What about a route from the internal server to the updates server and NAT to specific destination instead of internet nat

that could work ,

although as DavePalo said, it is hard to visualize, can you share some screen shot if possible or a diagram

Hope that helped