Routing NATTED traffic over an IPSEC tunnel
-
I am trying to establish an IPSEC tunnel such that natted traffic from an internal host is passed through an IPSEC tunnel.
Here is my current setup:
I have an internet connection at a remote site with a single static WAN IP. I setup an IPSEC tunnel to a specific remote subnet using this WAN IP as BOTH the endpoint and the local subnet (using single host). This does allow a ping generated from the WAN interface (using diagnostics->ping) to bring up the tunnel and pass through without a problem. My goal is to have traffic generated from a specific internal host be NATTED to this IP and THEN passed through the IPSEC tunnel, but for some reason, I am having a problem with the NATTED traffic not activating the IPSEC tunnel. Is it possible to pass the traffic through IPSEC after it has gone through NAT on the local pfsense?
Although I have setup a lot of complex IPSEC networks, I have never had to setup an IPSEC tunnel quite this way. Is this possible with pfsense?
thanks,
Joe