topic NAT is not working via VPN in Firewall and Security Management

NAT is not working via VPN

Christian_Dave_ — Wed, 28 Nov 2018 16:06:16 GMT

I have a site to site VPN connection. The source address is not translating going to the destination. There's no tunnel established. I have a TAC already working but also can't resolve the issue. We have done multiple debugs but can't find relevant information. Also from the "fw monitor" we can see the traffic but i's not translating. What else we need to check? Appreciate your help guys.

Re: NAT is not working via VPN

Christian_Dave_ — Wed, 28 Nov 2018 16:10:48 GMT

The VPN community is properly configured as per the client peer requirement. We have properly configured as well the vpn domain in the toplogy of both gateways.

The Rule is (Source: Original Srouce IP; Destination: Destination IP; Port: https, http)

For the Nat rule: The source shold translate to another Public IP going to the original destination.

Re: NAT is not working via VPN

PhoneBoy — Thu, 29 Nov 2018 03:00:39 GMT

Most obvious thing that comes to mind is the NAT setting in the community:

Re: NAT is not working via VPN

Christian_Dave_ — Thu, 29 Nov 2018 13:03:15 GMT

Hi Dameon,

Appreciated your response. I have checked that before already. Actually I have a TAC engaged already but still without success. We have tried to do a packet capture and still the source private ip is not translating to a public ip going to the destination. When we removed the vpn community on the rule, the source ip is translating.

What other things we need to check? Any idea?

Re: NAT is not working via VPN

PhoneBoy — Thu, 29 Nov 2018 14:02:42 GMT

Can you send me the TAC SR in question (perhaps in a PM)?

Re: NAT is not working via VPN

Christian_Dave_ — Tue, 04 Dec 2018 18:47:13 GMT

Hi Dameon,

Appreciated your help. We reconfigure the vpn community and encryption domain. Now we are able to see the tunnel and able to see encrypted packets on the log.

Re: NAT is not working via VPN

PhoneBoy — Tue, 04 Dec 2018 20:18:46 GMT

Glad you got it sorted out.

Re: NAT is not working via VPN

Christian_Dave_ — Fri, 07 Dec 2018 14:47:02 GMT

Thank You Dameon.. We figured out that the destination IP was included on our encrytion domain. That's why the source IP is not translating..

Re: NAT is not working via VPN

wsusetio — Wed, 09 Mar 2022 07:18:49 GMT

Hi, I have same issue. Tried to access the system that is on VPN but the source is not part of encryption domain. I nated the source to IP that is part of encryption domain. But it is not translating.