• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

NATing/Port forwarding between two locations (between two country)

Scheduled Pinned Locked Moved NAT
15 Posts 3 Posters 949 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • E
    ejaj
    last edited by Oct 16, 2018, 9:41 AM

    Scenario as below ..

    Firewall A & B have different public & private IPs.

    Application Hosted on Location B

    We want everyone can access our application with firewall A public IP i mean as below (which hosted on behind firewall B)

    Frist traffic will hit firewall A and then firewall A will forward that traffic to firewall B through IPsec tunnel

    so now what settings on both Pfsense we should do so we can make it successful..

    1 Reply Last reply Reply Quote 0
    • N
      NogBadTheBad
      last edited by Oct 16, 2018, 11:43 AM

      @ejaj said in NATing/Port forwarding between two locations (between two country):

      so now what settings on both Pfsense we should do so we can make it successful..

      IPsec tunnel & firewall rules.

      Don't NAT & port forward.

      Andy

      1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

      E 1 Reply Last reply Oct 16, 2018, 12:08 PM Reply Quote 0
      • E
        ejaj
        last edited by Oct 16, 2018, 12:05 PM

        can you give me example.i am new in pfsense i mean i am beginer in pfsense

        i again explain it :

        A location private IP 192.168.15.1/24
        Public:- 67.88.75.25/27

        B Location private :- 192.168.16.1/24
        Public :- 88.85.75.88/27

        now what settings we can do so we can access website with A location IP as our website hosted at B location.

        1 Reply Last reply Reply Quote 0
        • E
          ejaj @NogBadTheBad
          last edited by Oct 16, 2018, 12:08 PM

          @nogbadthebad

          can you give me example.i am new in pfsense i mean i am beginer in pfsense

          i again explain it :

          A location private IP 192.168.15.1/24
          Public:- 67.88.75.25/27

          B Location private :- 192.168.16.1/24
          Public :- 88.85.75.88/27

          now what settings we can do so we can access website with A location IP as our website hosted at B location.

          1 Reply Last reply Reply Quote 0
          • N
            NogBadTheBad
            last edited by Oct 16, 2018, 12:43 PM

            https://www.netgate.com/resources/videos/site-to-site-vpns-on-pfsense.html

            Andy

            1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

            1 Reply Last reply Reply Quote 0
            • E
              ejaj
              last edited by Oct 16, 2018, 12:57 PM

              Site to Site tunnel already there.

              You first understand the question i want to access website from A location network (hosted website on B location)

              first traffic hit A location firewall,A location forward traffic to B location firewall where our application hosted.

              1 Reply Last reply Reply Quote 0
              • D
                Derelict LAYER 8 Netgate
                last edited by Oct 16, 2018, 12:57 PM

                OpenVPN or IPsec?

                IPsec will not do this.

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • E
                  ejaj
                  last edited by Oct 16, 2018, 1:00 PM

                  @derelict

                  yes we know it.now what can we do next to make it successful

                  1 Reply Last reply Reply Quote 0
                  • D
                    Derelict LAYER 8 Netgate
                    last edited by Derelict Oct 16, 2018, 1:17 PM Oct 16, 2018, 1:15 PM

                    OpenVPN.

                    https://www.youtube.com/watch?v=ku-fNfJJV7w

                    I'd watch the whole thing. But the specific issue you need to address is the reply-to discussion on assigned interfaces that starts at about 31 minutes in.

                    In a nutshell (example addresses used):

                    Establish OpenVPN tunnel from A to B so A can access B at 192.168.16.0/24
                    A port forwards WAN connections to 67.88.75.26:80 to 192.168.16.100:80
                    On the B side you must:

                    1. Assign an interface to the OpenVPN instance
                    2. Be sure the traffic to 192.168.16.100:80 IS NOT matched by rules on the OpenVPN tab
                    3. Be sure the traffic to 192.168.16.100:80 IS matched by rules on the assigned interface tab

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    E 2 Replies Last reply Oct 17, 2018, 7:22 AM Reply Quote 0
                    • E
                      ejaj @Derelict
                      last edited by Oct 17, 2018, 7:22 AM

                      @derelict

                      Thanks buddy !

                      let me try it,get back to you with an update and if you get any other idea please share,Thanks again.

                      1 Reply Last reply Reply Quote 0
                      • E
                        ejaj @Derelict
                        last edited by Oct 17, 2018, 7:41 AM

                        @derelict Thanks for the information.I have somehow got success to forward the request from Location A to Location B. But reverse is not working.i mean request serve from location B to A location.

                        scenario as below

                        Location A

                        front end :- A location Public IP - 67.88.75.26:80
                        Backend :- B location Public IP - 88.85.75.87

                        Location B :-

                        Front end :- Location B Public IP :- 88.85.75.87
                        Backend : location B private IP : - 192.168.16.100:80

                        Additional info in IPsec we allow all traffic on all ports.

                        1 Reply Last reply Reply Quote 0
                        • D
                          Derelict LAYER 8 Netgate
                          last edited by Oct 17, 2018, 3:21 PM

                          IPsec? You have to use OpenVPN.

                          Chattanooga, Tennessee, USA
                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                          1 Reply Last reply Reply Quote 0
                          • E
                            ejaj
                            last edited by Oct 24, 2018, 10:50 AM

                            @derelict

                            Thanks Sir, for your support.

                            1 Reply Last reply Reply Quote 0
                            • D
                              Derelict LAYER 8 Netgate
                              last edited by Oct 24, 2018, 6:25 PM

                              Did you get it working?

                              Chattanooga, Tennessee, USA
                              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                              Do Not Chat For Help! NO_WAN_EGRESS(TM)

                              E 1 Reply Last reply Oct 25, 2018, 3:55 AM Reply Quote 0
                              • E
                                ejaj @Derelict
                                last edited by Oct 25, 2018, 3:55 AM

                                @derelict

                                No, We have to postpone it.as we are new in it so. by the way thanks again Sir.Thank you so so much for your kind support and help.

                                1 Reply Last reply Reply Quote 0
                                15 out of 15
                                • First post
                                  15/15
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                  This community forum collects and processes your personal information.
                                  consent.not_received