topic Re: Hide NAT for remote vpn. in SASE and Remote Access

Hide NAT for remote vpn.

Haris2887 — Thu, 01 Sep 2022 13:42:45 GMT

Hi guys

I am looking for a way to do hide NAT on a remote access VPN.

Basically I don’t want my Server to see the office mode IP range.

Instead I want all connections to be SNAT to 192.168.2.1.

I have tried to add a manual NAT rule for Source= (office mode IP range) Xlatedsource=(192.168.2.1(hide)

For some reason this does not work.

Below is a diagram of the scenario I am trying to achieve.

Any ideas ?

Re: Hide NAT for remote vpn.

PhoneBoy — Thu, 01 Sep 2022 15:40:19 GMT

What is the precise reason you need to hide the client IPs from the server?

The only NAT I've seen with Remote Access connections is IP Pool NAT, specifically with the use of SecuRemote.
Perhaps you can try using the object All_Internet in the Source field instead.
Otherwise, unless TAC says differently, it's likely an RFE.

Re: Hide NAT for remote vpn.

the_rock — Thu, 01 Sep 2022 16:19:58 GMT

NAT rule you added seems correct, can you send a screenshot?

Andy

Re: Hide NAT for remote vpn.

Haris2887 — Fri, 02 Sep 2022 00:10:10 GMT

The problem I am trying to solve is asymmetric routing.

The server has another interface (not shown in the diagram) a default gateway define that is NOT in the 192.168.2.x/24 subnet.

The NAT rule = See attached