Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Tecki0815
Explorer

static NAT in VPN tunel

Hello,
I have a working VPN S2S tunnel between CheckPoint and SonicWall FW.
On CheckPoint site we need to NAT a 10.x.x.x address (static NAT) so from the SonicWall site a VPN connection can be opened to our internal host.
When I adjust the host object adding a static NAT to it, I can see in the logs, that the host IP is not natted and dropped by the firewall.

do you have any hint, how the NAT within out VPN tunnel can be achieved ?

OurHost(10.10.10.10, static NAT 122.122.122.10)

working VPN (with no NAT rules):

PartnerHost 100.100.100.1  -> OurHost(ORIG IP 10.10.10.10)  

Needed connection (using NAT):

PartnerHost 100.100.100.1  -> OurHost(NAT 122.122.122.10) 

Do you have any hint how to configure this ?
As we have many working VPN connections, a global setting change may impact other VPNs.

The SonicWall may not even open a VPN in case there is a little issue with the NAT. 

 

 

Thank you 

0 Kudos
2 Replies
CaseyB
Advisor

Since you are configuring the static NAT on the host object, check this option within the VPN community, it should be unchecked for this scenario.

disable-nat.png

the_rock
MVP Platinum
MVP Platinum

Pretty much you configure manual static nat rue and as @CaseyB said, make sure that option is disabled inside community object.

Best,
Andy
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events