I have 2 questions.
1. I want to create an IPSec tunnel, using a loopback interface.
This removes a dependency on the main interface ip. ie if the loopback ip is :184.108.40.206, and the main internet ip is changed from 220.127.116.11 to 18.104.22.168, this then doesn't impact the IPSec tunnel.
After the IPSec tunnel is online.
2. I want to NAT the communication from different ip's across several internal subnets to a specific 10.x.x.x/24 subnet as the new "source". This subnet is then used to communicate to Site B's internal subnets. This masks Site A internal subnets and removes additional configuration requirements from Site B, when additional Site A subnets are enabled.
Can anyone direct me to the pertinent doco to look up how to do my NAT, ie question 2?
Doesn't anyone see any major issues with this design?
Thanks for any feedback
So since the traffic is sourced from site A and you are putting the NAT into site A's firewall. You can use a Source NAT, if you are putting the NAT rules in firewall B, then use a Destination NAT.
Hope this helps.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!