Host Website over IPsec to a QNAP

naiw

I hope this makes sense...

I have a qnap hosted on Vultr dot com. I then have a second pfsense appliance in my home office.
The two systems are connected via IPSec and work very well.

I now have a QNAP and I would like to host some small sites over NAT as shown in the diagram.

Is this possible to do?

I setup the NAT but it just times out when I try to connect.

NAT Setup.jpg

I have configured the NAT and IPSec rules to allow the traffic as well but it never connects.

IPSec Rules.jpg

viragomann

@naiw said in Host Website over IPsec to a QNAP:

The two systems are connected via IPSec and work very well.

Policy based IPSec, I guess?

It would work with routed IPSec if you assign an interface to the IPSec instance on the home pfSense and move over all firewall rules to it.

Edit:
With policy-based IPSec, however, possibly it works if you nat the traffic on the remote pfSense in the phase 2 to a local address. But I never did something like that.

naiw

@viragomann Thanks. going to do some reading up on this before I kills my pfselnse.