IPSec & NAT

[dsvj1977]

Hi everyone!

I have a situation, and I hope this is the right place to ask the question!  If not, please kick me repeatedly and shove to the right area.

I have an IPSec tunnel setup, my endpoint IP being 10.42.10.255.  The remote endpoint IP is 10.42.10.254.  I need to create a NAT rule, as the machine I need to access on the other end is 172.20.50.243.  My local LAN subnet is 192.168.1.0/24.  Where is in pfSense would I start to solve this issue?

Thanks,
Daryl

[doktornotor]

How did you come up with the idea that you need the NAT?

[phil.davis]

With the right remote networks specified across the VPN tunnel, and firewall rules that pass the traffic, traffic will be routed fine. There is no need for NAT.

[dsvj1977]

Well, it turns out the information originally provided to me was incorrect, and helps to answer why doktornotor questioned the validity of needing NAT! :)

Turns out my local IP will be 172.20.50.243.
There are 2 machines I am accessing on the other end, and they are 10.42.10.254 and 10.42.10.255.  I need to NAT from 192.168.1.0/24 to 172.20.50.243, as the other end rejects the connection otherwise.

Does any of this make sense?

Thanks,
Daryl