NATing/Port forwarding between two locations (between two country)

[ejaj]

Scenario as below ..

Firewall A & B have different public & private IPs.

Application Hosted on Location B

We want everyone can access our application with firewall A public IP i mean as below (which hosted on behind firewall B)

Frist traffic will hit firewall A and then firewall A will forward that traffic to firewall B through IPsec tunnel

so now what settings on both Pfsense we should do so we can make it successful..

[NogBadTheBad]

@ejaj said in NATing/Port forwarding between two locations (between two country):

so now what settings on both Pfsense we should do so we can make it successful..

IPsec tunnel & firewall rules.

Don't NAT & port forward.

[ejaj]

can you give me example.i am new in pfsense i mean i am beginer in pfsense

i again explain it :

A location private IP 192.168.15.1/24
Public:- 67.88.75.25/27

B Location private :- 192.168.16.1/24
Public :- 88.85.75.88/27

now what settings we can do so we can access website with A location IP as our website hosted at B location.

[ejaj]

@nogbadthebad

can you give me example.i am new in pfsense i mean i am beginer in pfsense

i again explain it :

A location private IP 192.168.15.1/24
Public:- 67.88.75.25/27

B Location private :- 192.168.16.1/24
Public :- 88.85.75.88/27

now what settings we can do so we can access website with A location IP as our website hosted at B location.

[NogBadTheBad]

https://www.netgate.com/resources/videos/site-to-site-vpns-on-pfsense.html

[ejaj]

Site to Site tunnel already there.

You first understand the question i want to access website from A location network (hosted website on B location)

first traffic hit A location firewall,A location forward traffic to B location firewall where our application hosted.

[Derelict]

OpenVPN or IPsec?

IPsec will not do this.

[ejaj]

@derelict

yes we know it.now what can we do next to make it successful

[Derelict]

OpenVPN.

https://www.youtube.com/watch?v=ku-fNfJJV7w

I'd watch the whole thing. But the specific issue you need to address is the reply-to discussion on assigned interfaces that starts at about 31 minutes in.

In a nutshell (example addresses used):

Establish OpenVPN tunnel from A to B so A can access B at 192.168.16.0/24
A port forwards WAN connections to 67.88.75.26:80 to 192.168.16.100:80
On the B side you must:

1. Assign an interface to the OpenVPN instance
2. Be sure the traffic to 192.168.16.100:80 IS NOT matched by rules on the OpenVPN tab
3. Be sure the traffic to 192.168.16.100:80 IS matched by rules on the assigned interface tab

[ejaj]

@derelict

Thanks buddy !

let me try it,get back to you with an update and if you get any other idea please share,Thanks again.

[ejaj]

@derelict Thanks for the information.I have somehow got success to forward the request from Location A to Location B. But reverse is not working.i mean request serve from location B to A location.

scenario as below

Location A

front end :- A location Public IP - 67.88.75.26:80
Backend :- B location Public IP - 88.85.75.87

Location B :-

Front end :- Location B Public IP :- 88.85.75.87
Backend : location B private IP : - 192.168.16.100:80

Additional info in IPsec we allow all traffic on all ports.

[Derelict]

IPsec? You have to use OpenVPN.

[ejaj]

@derelict

Thanks Sir, for your support.

[Derelict]

Did you get it working?

[ejaj]

@derelict

No, We have to postpone it.as we are new in it so. by the way thanks again Sir.Thank you so so much for your kind support and help.