Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPSEC NAT

    Scheduled Pinned Locked Moved IPsec
    3 Posts 2 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jonnytabpni
      last edited by

      Hi Everyone,

      I'm sure this has been asked before, but I can't find anything by searching.

      I would like to set up a site to site VPN. On one end at the main office, everything is "normal". On the other end (satellite office), there is already a NAT router there. I would like to install a pfsense box on the LAN side of this NAT router and set up a site to site VPN to the main office, basically creating an internal private network (which has VPN access to main office) within the current LAN.

      Is this possible using 1.2.3? The NAT router at the office is already running pfSense, if that helps at all.

      I understand that I can do this with OpenVPN very easily, however in 1.2.3 you can't firewall OpenVPN connections which I really need…

      Would the above "just work" as long as "IPSEC Passthrough" is enabled in the orignal NAT router at the satellite office? Would I need to do any port forwarding?

      If this isn't possible with 1.2.3, how stable is 2.0? Could I trust it for production use?

      Thanks

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        You can filter OpenVPN in 1.2.3, just takes a few extra steps:

        http://doc.pfsense.org/index.php/OpenVPN_Traffic_Filtering_on_1.2.3

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • J
          jonnytabpni
          last edited by

          Thanks jimp :)

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.