Multiple NordVPN with 1:1 NAT

Jesper 1

Hi.

I'm trying to get two or more separate NordVPN connections, in different countries to work, so I can create firewall rules to route different devices to be in different countries.

The problem I'm having is that both OpenVPN connections are getting the same virtual IP address from the NordVPN server (10.100.0.2) with the server being 10.100.0.1 in the address space 10.100.0.0/24.

After some research I found that 1:1 NAT might be a solution for this? So I created 2 VLANS (91 and 92) and added interfaces for them (10.10.91.0/24 and 10.10.92/24).

I manually created a GW for the interfaces (10.10.91.1 and 10.10.92.1) and I select in the Advanced options for the firewall rule to use this GW.

I also created an outbound NAT rule to accommodate the traffic (Don't know if t his is necessary with 1:1 NAT?

But I just can't get it to work. Any idea of what I'm missing? Do I for example need any firewall rules on the interfaces? Or do I need any static routes?

Or is there maybe a better way of getting two separate instances of NordVPN to work?

Kind Regards,

Jesper

TheNarc

@Jesper-1 Have you tried just using UDP for one of the client connections and TCP for the other? Unless they've changed something, in my experience this will get you different IP addresses (different subnets, even) so you don't need to do anything exotic to get it to work.

Bob.Dig

@Jesper-1 said in Multiple NordVPN with 1:1 NAT:

Or is there maybe a better way of getting two separate instances of NordVPN to work?

Restart/reconnct the client until the IPs differ.

Jesper 1

@TheNarc

Thanks for your reply. Yes I tried that, I'm still getting the same subnet for the virtual IP

Jesper 1

@Bob-Dig
Thanks for your reply. Yes, I've done that. I get the same IP every time

TheNarc

@Jesper-1 Strange, I used to run one UDP and one TCP with Nord and never had that issue. Have you tried a lot of different servers too? I think some may use different subnets.

Jesper 1

The thing is that even if I can get different addresses for TCP and UDP, it would still only work with 2 connections. Better if I can get the routing solved with 1:1 NAT somehow?