1:1 NAT across IPsec tunnel?

[roy_munson]

Hello,

I saw this was not supported in the past (3+ years ago) and wanted to see if this is possible in the latest version or if anyone else has been able to get this to work?

I've done 1:1 host NAT entries before with ASAs and would like to do the same with pfSense. I understand BiNAT works under the phase 2 settings for the entire network but I'd like to NAT multiple 1:1 entries. Setting up at outbound NAT or 1:1 NAT shows the internal IP undergoing NAT but it never traverses the IPsec tunnel.

Still a no-go with pfSense?

Thanks for your time!

[jimp]

You have to use Phase 2 entries with BINAT. You can make one phase 2 entry per mapping if you must do them individually.