Site-To-Site VPN with NAT on localy managed SMB device

[Chonyi]

Hello,

Im having issue with hide nat on localy managed 1200R. I need traffic to have hide NATed source and than enter the tunnel. What happens is that traffic is being NATed but then it just exits wan port without entering the tunnel.

Any ideas how to get this sorted? 

Thank you.

[PhoneBoy]

Did you uncheck Disable NAT for this site?

[Chonyi]

I have tried both ways, everytime I see NATed packets on WAN port without encryption.

[Chonyi · Accepted solution]

I finnaly got this working.

There are few requirements that need to be fulfilled in order for source NAT to function inside a tunnel.

Both original and NAT source need to be part of local encryption domain.

Policy rule allowing original source network to communicate with remote destination network should be defined in outgoing and incoming rules.

In VPN settings>Advanced tab disable NAT for this site shouldn't be checked.

NAT rules should be defined appropriately.

Cheers!

[Pedro_Espindola]

Did you add the translated range (after NAT) to your local encryption domain?