Troubles with DNAT
![simonebllc](https://us.v-cdn.net/6029482/uploads/avatarstock/nK66F1OVPQPYH.png)
![Friend Collector](https://us.v-cdn.net/6029482/uploads/badges/HNJASEUSC535.png)
![First Comment](https://us.v-cdn.net/6029482/uploads/badges/MBNFIRD87YVH.png)
I setup 2 Phase 2 VPN NATTED with the same GW (Phase1) in IKEv2. The Topology is this:
LOCAL LAN1 192.168.7.0/24 → NATTED ON 10.64.33.0/24 - REMOTE SUBNET 172.28.0.0/16
LOCAL LAN2 172.16.69.0/24 → NATTED ON 10.64.34.0/24 - REMOTE SUBNET 172.28.0.0/16
The 2 phases 2 go Online but only 1 DNAT works, the second one nope… Where i mistake?
If I disable the working one the other starts to work. The one that works is random, sometimes LAN1, sometimes LAN2
Sorry for my bad English…
All Replies
-
One of the destinations needs to change so that
LAN1 192.168.7.0/24 SNAT ON 10.64.33.0/24 - destination 172.28.0.0/16
LAN2 172.16.69.0/24 SNAT ON 10.64.34.0/24 - destination 172.29.0.0/16
You then need to change local/remote policy to match
0 -
Hi @simonebllc,
The original IP and mapped IP in DNAT setting cannot be subnet. You should set IP one by one.
Best regards,
EmilyDon't miss this great chance to upgrade your Nebula org. For free!
0 -
Hi Emily, this is false because if I activate only one Phase2 everything goes well.
0 -
Hi Peter, I tryed using in the remote Subnet 172.28.0.100/32 and 172.28.0.101/32 but with no success. The problem is always the same. Only 1 works randomly. Sometimes 172.28.0.100 and if I disable that phase2 starts to work the other.
0
Categories
- All Categories
- 414 Beta Program
- 2.2K Nebula
- 130 Nebula Ideas
- 88 Nebula Status and Incidents
- 5.4K Security
- 166 USG FLEX H Series
- 255 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 999 Wireless
- 36 Wireless Ideas
- 6.2K Consumer Product
- 233 Service & License
- 370 News and Release
- 77 Security Advisories
- 24 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2.9K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 80 About Community
- 69 Security Highlight