NATing one subnet to another for IPsec Tunnel
-
Hello- I have the following situation.
PFSense 2.1.4 - LAN Subnet: 192.168.1.1
IPsec VPN to a hosted server environment, needing to Access the .1.1 subnet for printing purposes.
The server hosting company is wanting me to "NAT the 192.168.1.0 subnet to 10.100.29.0" to get around IP conflicts on their end.
I am not very familiar with setting up custom NAT rules at all… This may be something simple... but I really have no clue.
Help is appreciated!
Thanks.
-
No fancy rules needed. All you have to do is add the network they asked for in the P2. Edit the Phase 2 entry for your tunnel and right under where you have 192.168.1.0 now, there's a box for NAT options, set it to the subnet they gave you (10.100.29.0/24).
Then when your 1.x net tries to reach across the VPN, it looks like it comes from 10.100.29.x, and when the far side needs to reach your 1.x net, they talk to 10.100.29.x instead and the NAT will get it there.
