I've been trying to join two networks (A) and (B) with IPSEC and pfsense. So that computers on the (A) network can connect to computers on the (B) network.

No big deal, but on the (B) network, packets must come from a specific NATed address, otherwise network (A) would overlap with other networks from (B) point of view.

So I configured an IPSec VPN using my favorite tool (pfsense), the phase 1 tunnel fonctions properly, but the phase 2 configuration, although good looking, does not functions properly :


  • Local network : the network (A)
  • NAT Address : A single IPV4 choosen by administrator
  • Remote network : the network (B)

    Tunnel phase 2 configuration

Is this configuration sufficient ? or does it needs extra outbound NAT rules ? I could not find a recent example or tutorial with the NAT option working on pfsense.

Found similar problem here : https://forum.netgate.com/topic/147373/nat-and-ipsec

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.