NAT 1:1, see traffic on LAN, not on WAN
-
Trying to set up the following.
<192.168.10.10/24> <-> {192.168.10.1/24} <-> [external internet IP 1] <-> [external internet ip 2] <-> {192.168.20.1/24] <-> <192.168.20.10>
192.168.10.10 and 192.168.20.10 are routers (with IPSEC capabilities) that need to see each other. 192.168.10.1 and 192.168.20.1 are LAN interfaces of 2 different pfSenses. Each pfSense has an external IP address.
Nothing else needs to be on these pfSenses. I think this should be a 1:1 NAT situation. I set up a 1:1, and doing a packet capture, I can see the packets on the LAN (192.168.10.1) interface coming from 192.168.10.10. Good. UDP traffic port 500 and 4500.
But I don't see anything on the WAN interface of the first pfSense (with external internet IP 1).
It appears that the pfSense is blocking the traffic from LAN to WAN.
Help, please :)