How can I configure different encryption domain ? [SOLVED]



  • Hello all,
    I don't know how to configure this situation on my IPSEC.

    I have a local network (192.168.0.0/24) and my customer has their local network (192.168.1.0/24), but they want to configure in other encryption domain (10.0.0.0/24) and don't mine.
    here the example..

    CUSTOMER'S SERVICE____ENCRYPTION DOMAIN_________REMOTE CUSTOMER
    192.168.0.1 ---------------------- -> 10.0.0.0/24--------------- > IPSEC ----> 192.168.1.1

    How can I configure that ? Do I need use NAT/BINAT ? If yes How ?
    Thank you.



  • I fixed it..

    I put on IPSEC PHASE 2 > NAT BINAT IP 192.168.0.x/32 and LOCAL NETWORK 10.0.0.0/24 and REMOTE NETWORK 192.168.1.0/24

    and then I made NAT 1:1 > 10.0.0.x > INTERNAL IP > 192.168.0.1 and made the rules on INTERFACES IPSEC and LAN.
    thank you.