0
votes
0answers
66 views

Cisco ASA 5505: PAT / NAT between 2 IPSec Tunnels

I've the following Setup: Customer <-> HQ <-> Branchoffice The Customer has a 192.168.1.0/24 subnet. On the HQ only the VPN Gateway is in my context, 172.20.10.1 . And on the Branchoffice ...
2
votes
1answer
43 views

Should we accomodate a customer asking us to NAT servers behind new PUBLIC IPs within a VPN?

We're a SaaS provider, setting up a IPSec VPN between our data center and a customer's site so they can directly access their hosted database server from their LAN. Instead of exposing our internal ...
0
votes
1answer
807 views

strongSwan setup where both sides are behind NAT

I'm trying to setup a strongSwan server in my home and connect to it from another network. Let's say sun is the VPN server and venus is the client. Both sun and venus are behind NAT networks. sun is ...
0
votes
1answer
361 views

How to NAT behind public IP on pFsense before IPSEC to Cisco ASA?

I have two networks: Local 192.168.1.0/24 and Remote 10.8.8.8/24. On the local network I have installed pFsense as gateway. On the remote network there is a Cisco ASA that I don't have control over. ...
0
votes
1answer
3k views

Routing traffic through IPSec with NAT and IP Alias in pfSense

I have a pfSense firewall and I need to connect to a remote site (form my client). I'm running into several issues, and don't see traffic flowing in any way. Here's my setup: LAN is 192.168.0.0/16 ...
5
votes
2answers
1k views

How do I route a public IP range over an IPSEC VPN?

So, I have an established IPSec Site to Site tunnel. Site A has a SonicWall, Site B has a EdgeRouter. The first tunnel consists of Site A's NATed ips to Site B's NATed ips. Everything works as ...
0
votes
1answer
179 views

ipsec (openswan) routing or dns issue with iphone

I got an established VPN connection, but either the routing or the resolving is not working. The configuration is taken from ...
1
vote
1answer
625 views

How can I NAT traffic for one VPN to come from a different IP on Cisco ASA?

I have a Cisco ASA firewall between our private network (10.1.0.0/16) and the outside world, and multiple VPNS going to client sites. Existing: [10.1.0.2...] = source client | [10.1.0.1 ASA ...
2
votes
3answers
403 views

Netgear VPN LAN2LAN address translation

Here's my question: I have set up a VPN IPsec LAN2LAN (or site2site) with the following parameters: local subnet: 10.178.51.64/27 remote subnet : 10.174.0.0/16 The vpn tunnel comes up correctly ...
1
vote
0answers
313 views

Linux IPsec VPN and SNAT

I'm trying to connect my network to an IPSec VPN, and for this my connexions need to come from a given domain. The network is the following: Internal network eth1:10.0.0.1/14 eth0:1.2.3.4 ...
2
votes
2answers
2k views

Understanding ipsec with NAT and dynamic IP's

I'm using OpenSWAN to set up a net-to-net VPN tunnel. I have succeeded in configuring a test scenario as follows: About test and test2: they are Ubuntu 12.04 virtual machines created using ...
1
vote
1answer
336 views

When is an IPsec tunnel a real candidate for NAT-T (when is it absolutely required?)?

I've had a persistent problem establishing phase 1 of an IPsec tunnel I am initiating from an endpoint at my site to a vendor. It is a bit of an odd configuration and I am not sure if NAT-T must be ...
2
votes
1answer
1k views

SNAT through Racoon IPSec VPN

I am trying to route traffic from a device (that I will call "target") connected to my Ubuntu box (that I will call "host") to servers at a remote office. The host uses a Racoon IPSec VPN, connected ...
1
vote
2answers
1k views

Cisco IPSec, nat, and port forwarding don't play well together

I have two Cisco ADSL modems configured conventionally to nat the inside traffic to the ISP. That works. I have two port forwards on one of them for SMTP and IMAP from the outside to the inside this ...
0
votes
2answers
541 views

Public-to-Public IPSec tunnel: NAT confusion

I know this is possible -- and apparently fairly common with larger companies that don't/can't route private addresses for overlap reasons -- but I can't wrap my head around how to get this to work. ...
4
votes
1answer
716 views

Windows Server 2003 IPSec Tunnel Connected, But Not Working (Possibly NAT/RRAS Related)

Configuration I have setup a "raw" IPSec tunnel between a Windows Server 2003 (SBS) machine and a Netgear FVG318 according to the instructions in Microsoft KB816514. The configuration is as follows ...
0
votes
1answer
196 views

Scaling up to tens of hundreds of IPSec tunnels and alternative methods of secure transactions

I may have a need to add (to start) 10 IPSec tunnels in a hub-spoke design, whereas communication is one-way (spokes -> hub only) for the purpose of collecting data in a central database server. Each ...
0
votes
1answer
638 views

GRE over IPSec behind FW

I have a checkpoint S-Box which is a gateway for network 192.168.0.0/24. Internal IP is 192.168.0.1. On the S-Box configured static VPN tunnel with local IP 10.x.x.x and remote 10.y.y.y. I need to ...
1
vote
2answers
7k views

PPTP/GRE Multi-forwarding NAT IPTables Example

Google is showing me some returns on PPTP/GRE NAT through iptables/netfilter that will allow multiple connections. However, I am not finding an example of using this pptp helper module that allows ...
3
votes
2answers
4k views

IPSec Tunnel to Amazon EC2 - Netkey, NAT, and routing issue

I'm working on getting an IPSec VPN working between Amazon EC2 and my on-premise. The goal is to be able to safely administer stuff, up/download data, etc. over that tunnel. I have gotten the tunnel ...
0
votes
1answer
902 views

IPSEC tunnel Fortinet Transparent Mode to inside Fortinet firewall in NAT Mode does not respond to incomming traffic

I have 2 fortinet firewalls (fully patched); fw1 is providing an IPSEC tunnel in transparent mode. beneath this firewall is a fw2, a NAT firewall with a VIP address that has been confirmed to work. ...
2
votes
2answers
3k views

How do you implement NAT-T passthrough on a Juniper SRX series Firewall?

We have 3 juniper SRX-100 firewalls, they are configured like so: FW1 -> FW2 -> INTERNET -> FW3 We would like to create an IPSEC tunnel between FW3 and FW1 passing through FW2 preferably using ...