topic Re: Site-To-Site VPN with NAT on localy managed SMB device in Spark Firewall (SMB)

Site-To-Site VPN with NAT on localy managed SMB device

Chonyi — Fri, 19 Jul 2019 16:34:12 GMT

Hello,

Im having issue with hide nat on localy managed 1200R. I need traffic to have hide NATed source and than enter the tunnel. What happens is that traffic is being NATed but then it just exits wan port without entering the tunnel.

Any ideas how to get this sorted?

Thank you.

Re: Site-To-Site VPN with NAT on localy managed SMB device

PhoneBoy — Fri, 19 Jul 2019 21:27:25 GMT

Did you uncheck Disable NAT for this site?

Re: Site-To-Site VPN with NAT on localy managed SMB device

Chonyi — Mon, 22 Jul 2019 08:10:48 GMT

I have tried both ways, everytime I see NATed packets on WAN port without encryption.

Re: Site-To-Site VPN with NAT on localy managed SMB device

Chonyi — Mon, 22 Jul 2019 12:15:10 GMT

I finnaly got this working.

There are few requirements that need to be fulfilled in order for source NAT to function inside a tunnel.

Both original and NAT source need to be part of local encryption domain.

Policy rule allowing original source network to communicate with remote destination network should be defined in outgoing and incoming rules.

In VPN settings>Advanced tab disable NAT for this site shouldn't be checked.

NAT rules should be defined appropriately.

Cheers!

Re: Site-To-Site VPN with NAT on localy managed SMB device

Pedro_Espindola — Mon, 22 Jul 2019 16:30:12 GMT

Did you add the translated range (after NAT) to your local encryption domain?