IPSEC Transparent traffic with pfsense

[mrgizmo]

Hello,
I have a setup like in this picture, 2 pFsense routers connected over IPSEC, everything is working fine, I have only one problem that I cannot solve and need some tip.

When I try to connect from Client A (192.168.10.1) to Client D (192.168.20.2), the connection is established but there's some NAT, if I inspect the incoming connections on the Client D I see a source connection from pfSense SITE2 and not directly from Client A.

root@clientD:~# netstat -an |grep :22
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN
tcp        0      0 192.168.20.2:22         192.168.20.254:1124     ESTABLISHED

Is there any way to change this behaviour?
Thank's! :)

[viragomann]

@mrgizmo
Die you add an outbound NAT rule to LAN?

[mrgizmo]

Hi @viragomann,
I've tried some rules on the outband but none of them works .

Dou you have aany suggestion?

Thanks.

[viragomann]

@mrgizmo
The point is that it only behaves like that if there is an active outbound NAT rule on LAN or if you're doing NAT in IPSec p 2.

So if you're in doubt provide these settings.