NAT from local network to Site-To-Site tunnel?

LarrY_FIN

Hi! I have a scenario, where 3rd party has public and internal IP-address for a FQDN. We have site-to-site tunnel between our and their local networks. Is there a correct way to do NAT for cases, when if our computer in local network resolves incorrectly FQDN to 3rd party's public IP instead of local IP where we want to go? We would want that when it happens, our firewall would redirect that traffic to 3rd party's internal IP-address which is behind the Site-To-Site tunnel.

Zyxel_Melen

Hi @LarrY_FIN,

USG FLEX/ATP and USG FLEX H series support setting NAT rules for Site-to-site VPN.

USG FLEX/ATP:

USG FLEX H:

PeterUK

You can put in a DNS entry to go to local IP if DNS is to Zywall

LarrY_FIN

Hi!

Thank you for the reply!

We have set the dns to resolve to the local address, but I would like to know if it is possible to do NAT so that if some computer still resolves wrongly for some reason, firewall would still route to correct location.

Zyxel_Melen

Hi @LarrY_FIN,

USG FLEX/ATP and USG FLEX H series support setting NAT rules for Site-to-site VPN.

USG FLEX/ATP:

USG FLEX H: