How to configure SCR Site to Site VPN while one Site is behind NAT?

Options
Zyxel_Jerry
Zyxel_Jerry Posts: 1,076  Zyxel Employee
First Anniversary 10 Comments Friend Collector First Answer
edited November 2023 in Other Topics

To build up Site-to-Site VPN tunnel on Nebula while one Site is behind NAT, follow these steps:
1. Navigate to Site-wide > Configure > Security router > Site-to-Site VPN

2. Config Nat Traversal:

Customize the WAN IP address of your SCR device.

3. Configure Site-wide settings:

1. Activate the tunnel.

2. Specify a name for your VPN tunnel.

3. Enter the public IP address of the peer site.

4. Define the private subnet of the peer site.

5. Choose your preferred IPsec policy.

6. Enter your pre-shared key.

By following these steps, you can successfully set up a Site-to-Site VPN tunnel on Nebula while the SCR device is behind NAT.