IPSec: NAT for every local Subnet?
jme last edited by
we plan to change from OpenBSD to Pfsense. We have
6x Local Subnets (like 192.168.x.x/24)
10x IPSec Phase 1
18x IPSec Phase 2 (like 10.200.0.0/16, 192.168.x.x/24)
NAT Network 192.168.136.0/24
I was testing the IPSec Connections on PfSense, but did I realy setup one Phase2 for every local Subnet for NAT?
On OpenBSD we have a loopback Interface for NAT.
But did not find any Option for creating loopback Interface on PFsense.
Or is there a easy way for NAT from multiple local Subnet into IPSec Tunnels?
I don`t want to have like over 100 Phase2 Tunnels.
Thanks a lot.
eri-- last edited by
You can specify the NAT translation on the phase2 settings page.
It is clearly marked as NAT segment translate.