How can I configure different encryption domain ? [SOLVED]
-
Hello all,
I don't know how to configure this situation on my IPSEC.I have a local network (192.168.0.0/24) and my customer has their local network (192.168.1.0/24), but they want to configure in other encryption domain (10.0.0.0/24) and don't mine.
here the example..CUSTOMER'S SERVICE____ENCRYPTION DOMAIN_________REMOTE CUSTOMER
192.168.0.1 ---------------------- -> 10.0.0.0/24--------------- > IPSEC ----> 192.168.1.1How can I configure that ? Do I need use NAT/BINAT ? If yes How ?
Thank you. -
I fixed it..
I put on IPSEC PHASE 2 > NAT BINAT IP 192.168.0.x/32 and LOCAL NETWORK 10.0.0.0/24 and REMOTE NETWORK 192.168.1.0/24
and then I made NAT 1:1 > 10.0.0.x > INTERNAL IP > 192.168.0.1 and made the rules on INTERFACES IPSEC and LAN.
thank you.