Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    2.0.3 LAN-to-LAN IPsec VPN with Overlapping Networks

    Scheduled Pinned Locked Moved IPsec
    3 Posts 2 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cuccu
      last edited by

      I have a connection site2site with this parameters:

      Parameter of configuration
      Phase 1
      encryption aes-256
      authhentication SHA1
      DH Group 2 (1024bit)
      keylife 1440 minuti
      No aggressive mode

      Phase 2
      encryotion aes-256
      authhentication SHA1
      No PFS
      keylife 3600 seconds

      Site A
      Firewall: Pfsense 2.0.3-RELEASE (amd64)
      LAN network: 10.100.0.0/16
      DMZ network: 10.180.1.0/24

      I should use the  network 10.30.48.48 255.255.255.240 to NAT some servers on tunnel ipsec.

      Site B ( a big company)
      Firewall: Fortinet ??
      lan network: I don't know
      Remote LAN for tunnel ipsec: 10.159.48.48 255.255.255.240

      If I specify the 10.159.48.48 on Local Network for Ipsec tunnel the button for connection is missing…

      Is possible to use the network 10.30.48.48 for nat my servers (LAN o DMZ interface) on tunnel VPN ?
      How can I do this ?

      thank you for your support

      1 Reply Last reply Reply Quote 0
      • C
        cuccu
        last edited by

        Sorry I read just now that with the new release 2.1

        New features :  will be implemented on IPSEC  NAT before IPsec (1:1 or many:1) outbound.

        I think that with 2.0.3 is not possible to configure IPSEC with NAT. Is correct ?

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          Correct, NAT+IPsec will only work on 2.1 using the NAT option in the Phase 2 settings.

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.