Welcome to the Sophos User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

LinkBack Thread Tools Display Modes
Prev Previous Post   Next Post Next
Junior Member
Join Date: Jun 2012
Posts: 3
#1 (permalink)  
Old 06-12-2012, 03:19 PM
Default SNAT from one IPSec Tunnel to another

Hello, guys!

We have one task that cannot complete for past few days. We have Astaro Virtual Appliance with a lot of IPSec tunnels. At this task we manage only with two of them.

Astaro Internal Network:

Local net:
Remote net:

Local net:
Remote net:

We need to NAT traffic from to with ip

I have added to IPSec1 network as Local net to permit passing of these packets

After it, I created SNAT rule:
Traffic Source:
Traffic Service: Any
Traffic Destionation:
Type: SNAT
select Rule applies to IPSec packets

But I cannot see any translation while pinging or telneting.

For tests, I cloned this SNAT rule and changed Traffic Source to another local network on Astaro:
All works correct with this network - is NATed to and after it is being sent to I see nat translations on astaro:

Proto NATed Address Destination Address State

So, SNAT rule doesn't change its behavior despite "Rule applies to IPSec packets" is turned on or off.

Please help, it's very important for us.
Reply With Quote

ipsec, nat

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

All times are GMT. The time now is 06:52 PM.

Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2015, Jelsoft Enterprises Ltd.

These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.