Ipsec nat problem
-
Hi,
I set up a IPSEC VPN through my pfSense 2.0.1-RELEASE and a Cisco ASA. I configured phase 1 and phase 2 in the correct way and the tunnel is working fine. What I cannot do is to nat the local network addresses to my lan addresses.
This is the configuration:
Local network is 120.40.120.0/24
Remote network is 100.50.100.0/21
My LAN is 10.0.100.0/24
Once connected, the correspondance should then be, i.e.: 120.40.120.150 –> 10.0.100.150How do I make this work? Should I make a 1:1 nat? And how?
Thank you very much for any help!
-
NAT+IPsec does not work in 2.0.x.
It was recently added to 2.1, you can make it work there (there is an extra box in the Phase 2 config to define a NAT network) -
Ok, I will wait for a stable version of 2.1 then. Thanks for your help.
-
Hi,
(my first post here)
I am currently finishing the setup of the new firewall for my company, now it's running 2.0 where we lack the NAT+IPSEC feature.
Should I consider the builtin feature in 2.1 as more/less/equally reliable as the 2 boxes setup with 2.0?
Should I consider the option to run 2.1 instead of 2.0 as a good, riskless option?My additional question would be : on a multi-WAN setup, is it possible with 2.1 to have redundant IPSEC connections, one using each WAN, but with same remote endpoint ?
-
2.1 is stable now days.
Just some snapshot might have issues due to how snapshot work and development going on.For the ipsec HA setup you would need different remote ip addresses since its still not possible to bind ipsec to a failover group or assign same remote peer to 2 different tunnels.
