Need to NAT private IPs to public IPs over IPSec

[ttblum]

Hello,

I need to set up an IPSec tunnel with a vendor that is requiring me to NAT all the private IPs of the hosts on my side to public IPs.

I believe pfSense does have the feature to NAT over IPSec in this way.

I don't have very many public IPs available to use, can I pick some random IP addresses from a foreign country's IP space that we're not likely to communicate with?

[dotdash]

@ttblum:

I believe pfSense does have the feature to NAT over IPSec in this way.

There is a BINAT option in the phase2. I haven't tried using public IPs, but it should work.

@ttblum:

I don't have very many public IPs available to use, can I pick some random IP addresses from a foreign country's IP space that we're not likely to communicate with?

That's not gonna work, they have to be your public IPs.