topic VPN-NAT question in General Topics

VPN-NAT question

SThatipelly — Thu, 11 Apr 2019 16:37:11 GMT

I have 10.240.0.0/12 in the Proxy ID and would like to NAT all my 192.168.x.x addresses behind 10.248.250.10 out of that 10.240/12.
my plan is to create the NAT rule and assign that 10.248.250.10 to the VPN tunnel Interface. will this create a route to whole 10.240/12 or just 10.248.250.10? I have active networks on 10.240 subnet. so trying to be cautious before making the change.

TIA.

Re: VPN-NAT question

Raido_Rattameister — Thu, 11 Apr 2019 16:59:29 GMT

Use 10.248.250.10/32 as IP on tunnel interface. Then you are fine.

Re: VPN-NAT question

SThatipelly — Thu, 11 Apr 2019 17:11:10 GMT

thank you. I will try this and let you know the result.

Re: VPN-NAT question

SThatipelly — Thu, 11 Apr 2019 19:38:23 GMT

@Raido_Rattameister without even putting that IP on the interface, I am able to ping the endpoint on other side.

we have just unidirectional traffic from my side to the other. I think that's the reason it worked.

Re: VPN-NAT question

Raido_Rattameister — Thu, 11 Apr 2019 20:41:32 GMT

You need IP on tunnel interface only if you do dynamic routing or tunnel monitoring.