Policy based VPN with NAT on TNSR

[prasadpkulkarni]

Hi ,

Is it possible to set Policy Based VPN on TNSR with Source NAT ( similar to PFSense ) ?

also does route based VPN support source NAT for IPsec VPN ?

Thanks in advance

Regards,

Prasad

[Derelict]

@prasadpkulkarni said in Policy based VPN with NAT on TNSR:

Hi ,

Is it possible to set Policy Based VPN on TNSR with Source NAT ( similar to PFSense ) ?

I assume you are referring to what is possible with OpenVPN, since NAT is not supported on IPsec VTI interfaces?

No, policy-based routing is not currently supported.

also does route based VPN support source NAT for IPsec VPN ?

tnsr handles NAT differently than pfSense, operating on inside and outside interfaces and pools, instead of source addresses and outbound interfaces. I have not personally tried making an IPsec ipip interface a NAT outside interface but it seems like it could work. You can read all about NAT in tnsr here:

https://docs.netgate.com/tnsr/en/latest/nat/index.html

Thanks in advance

Regards,

Prasad

[prasadpkulkarni]

@Derelict

Thanks for reply , I think I got answer for Policy Based VPN ( like PFSense) that it is not supported on TNSR

What I am looking for is have NAT before IPSec due to overlapping of Private Network , is that possible ? the NAT document gives info related to NAT at interface level but not for what I am looking for ( IPSec ).

Is there any reference documents for this ?

Thanks