How to configure SCR Site to Site VPN while one Site is behind NAT?

Zyxel_Jerry

To build up Site-to-Site VPN tunnel on Nebula while one Site is behind NAT, follow these steps:
1. Navigate to Site-wide > Configure > Security router > Site-to-Site VPN

2. Config Nat Traversal:

Customize the WAN IP address of your SCR device.

3. Configure Site-wide settings:

1. Activate the tunnel.

2. Specify a name for your VPN tunnel.

3. Enter the public IP address of the peer site.

4. Define the private subnet of the peer site.

5. Choose your preferred IPsec policy.

6. Enter your pre-shared key.

By following these steps, you can successfully set up a Site-to-Site VPN tunnel on Nebula while the SCR device is behind NAT.