Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPsec routing between 3 networks.

    Scheduled Pinned Locked Moved NAT
    natipsecrouting
    3 Posts 2 Posters 621 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • operator2024O
      operator2024
      last edited by

      Hello guys.

      The network structure looks like this.

      Network A (192.168.88.0/24) -> IPsec -> Network B gateway (192.168.99.0/24) <- IPsec <- Network C (192.168.111.0/24)

      There is the following task, from the network from the address 88.115 to access the address from the network 111.103 with port 6666

      IPsec in tunnel mode.
      I understand what needs to be done through NAT DST / SRC, but for some reason it does not work, traffic in one direction comes back to the gateway (pfSense), but does not return to 88.115.

      Network B (pfSense) gateway

      How can this be done?

      operator2024O 1 Reply Last reply Reply Quote 0
      • operator2024O
        operator2024 @operator2024
        last edited by

        @operator2024 The problem was resolved through the creation of an additional phase 2

        P 1 Reply Last reply Reply Quote 0
        • P
          pfsense2090 @operator2024
          last edited by

          @operator2024 Hi
          I have same situation, no matter what I do I can't get a second phase 2 to come up when it uses a subnet that doesn't directly exist on a local interface.
          could you please tell me what exactly you did so i can compare with my conf

          in my case i have
          Palo Alto --- IPsec ---- Pfsense --- IPsec --- AWS

          Pfsense --- IPsec ---- Pfsense --- IPsec --- AWS

          both don't work
          could you please help

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.