Policy based VPN with NAT on TNSR
-
Hi ,
Is it possible to set Policy Based VPN on TNSR with Source NAT ( similar to PFSense ) ?
also does route based VPN support source NAT for IPsec VPN ?
Thanks in advance
Regards,
Prasad
-
@prasadpkulkarni said in Policy based VPN with NAT on TNSR:
Hi ,
Is it possible to set Policy Based VPN on TNSR with Source NAT ( similar to PFSense ) ?
I assume you are referring to what is possible with OpenVPN, since NAT is not supported on IPsec VTI interfaces?
No, policy-based routing is not currently supported.
also does route based VPN support source NAT for IPsec VPN ?
tnsr handles NAT differently than pfSense, operating on inside and outside interfaces and pools, instead of source addresses and outbound interfaces. I have not personally tried making an IPsec ipip interface a NAT outside interface but it seems like it could work. You can read all about NAT in tnsr here:
https://docs.netgate.com/tnsr/en/latest/nat/index.html
Thanks in advance
Regards,
Prasad
-
Thanks for reply , I think I got answer for Policy Based VPN ( like PFSense) that it is not supported on TNSR
What I am looking for is have NAT before IPSec due to overlapping of Private Network , is that possible ? the NAT document gives info related to NAT at interface level but not for what I am looking for ( IPSec ).
Is there any reference documents for this ?
Thanks
