NAT without braking current IPSec

[mike.07]

Hi All, 

Need some help regarding my dilemma.

IPsec tunnel between Site A and Site B.

Static route for this tunnel is setup to forward traffic to only on subnet (10.100.x.x).

I am working on updating patches on server that is under Site A.

I need a solution to allow traffic from internet site to the server IP that is on Site A.

is there a NAT policy that i can deploy which will not break the connection with IPsec but will allow traffic from outside to the server's IP?

Thank you for your help.

[JayGolf]

Hi @mike.07 ,

Are you looking for a NAT rule to allow public access to the public IP of the server? 

[DavePalo]

Hi @mike.07, it would be useful if you could provide a little more info on your setup - or a diagram please.

Finding it hard to visualise what you are trying to do.

Thanks,

Dave

[Rfetiti]

Hello 

What about a route from the internal server to the updates server and NAT to specific destination instead of internet nat 

that could work , 

although as DavePalo said, it is hard to visualize, can you share some screen shot if possible or a diagram 

Hope that helped