We are providing vpn connections to corporate offices on wireless Dongles which are connected to the WAN interface of a special router called BIB. On this BIB router, there is one WAN interface for our wireless Dongles and 4 LAN interfaces. One of our customers wants to use IPSec Tunnel for data being sent from machines connected to the LAN interfaces.
Now, as per default behaviour of BIB router, the data from it's LAN interfaces is being NATTED (with the IP Address of the wireless dongle), when sent out of the WAN interface. Also, it is important to state that our core node PDSN will only accept data with source address allocated by it to the wireless dongle and not with the source address of the LAN machines.
Now one of our major corporate customer wants to use IPSec Tunnels with it's VPNs.
I just want to ask that can we provide IPSec Tunnels solution with NAT being enabled ??????
Any help in this regard will be highly appreciated.
This Setup can be done right away. The IPSec Tunnel Source wont be the LAN interface of the Router. The Source would be the WAN which will establish the Tunnel with the remote end.
And then you need to deny the NAT for the interesting traffic, what I mean here is that after the IPSec Tunnel Established, you need to deny the Nat from traffic initiated from the LAN to the other end LAN.
This Of Course you should have WAN Connectivty between your IPSec Peers.
This document gives several answers on frequently asked questions for PFRv3 channel state behavior.
Q1: What are all the channel operational states from a BR (border role) perspective and what are the rules/conditions to be in each st...
The need was to reach an host inside a LAN through a VPN connection managed by the LAN gateway (Cisco 1921).
The LAN gateway performs NAT and there was a dedicate nat rule for the host i wanted to reach through VPN.
I couldn't connect to the hos...
We have 3 identical switches configured by someone else and would like to claim some of the Gigabit ports(G1/G2/G3/G4) for use on servers. When we try to change the wiring and configuration, we run in to connectivity issues. Attached is a des...