NATing/Port forwarding between two locations (between two country)

[NogBadTheBad]

https://www.netgate.com/resources/videos/site-to-site-vpns-on-pfsense.html

[ejaj]

Site to Site tunnel already there.

You first understand the question i want to access website from A location network (hosted website on B location)

first traffic hit A location firewall,A location forward traffic to B location firewall where our application hosted.

[Derelict]

OpenVPN or IPsec?

IPsec will not do this.

[ejaj]

@derelict

yes we know it.now what can we do next to make it successful

[Derelict]

OpenVPN.

https://www.youtube.com/watch?v=ku-fNfJJV7w

I'd watch the whole thing. But the specific issue you need to address is the reply-to discussion on assigned interfaces that starts at about 31 minutes in.

In a nutshell (example addresses used):

Establish OpenVPN tunnel from A to B so A can access B at 192.168.16.0/24
A port forwards WAN connections to 67.88.75.26:80 to 192.168.16.100:80
On the B side you must:

1. Assign an interface to the OpenVPN instance
2. Be sure the traffic to 192.168.16.100:80 IS NOT matched by rules on the OpenVPN tab
3. Be sure the traffic to 192.168.16.100:80 IS matched by rules on the assigned interface tab

[ejaj]

@derelict

Thanks buddy !

let me try it,get back to you with an update and if you get any other idea please share,Thanks again.

[ejaj]

@derelict Thanks for the information.I have somehow got success to forward the request from Location A to Location B. But reverse is not working.i mean request serve from location B to A location.

scenario as below

Location A

front end :- A location Public IP - 67.88.75.26:80
Backend :- B location Public IP - 88.85.75.87

Location B :-

Front end :- Location B Public IP :- 88.85.75.87
Backend : location B private IP : - 192.168.16.100:80

Additional info in IPsec we allow all traffic on all ports.

[Derelict]

IPsec? You have to use OpenVPN.

[ejaj]

@derelict

Thanks Sir, for your support.

[Derelict]

Did you get it working?

[ejaj]

@derelict

No, We have to postpone it.as we are new in it so. by the way thanks again Sir.Thank you so so much for your kind support and help.