Skip to main content
bigneo7
New Member
November 18, 2021
Solved

IPSec Site to Site Connection

  • November 18, 2021
  • 1 reply
  • 3082 views

Hi,

 

How to connect branch office which is the firewall is behind router? 

Branch office WAN using local ip, while router using public ip

Best answer by enasrullayev

Hello!

 

1. You must configure NAT to change incoming public ip to your firewalls ip which will be responsible for IPSec connection.

2. On the other Site while configuring you will have to enable NAT Traversal (which will tell to the firewall that you will be connecting to the NAT ed private ip address).

3. Don't use AH (authentication header) in this use case. Because of AH encrypts whole ip packet in tunnel mode it wont work.

 

1 reply

enasrullayev
New Member
November 18, 2021

Hello!

 

1. You must configure NAT to change incoming public ip to your firewalls ip which will be responsible for IPSec connection.

2. On the other Site while configuring you will have to enable NAT Traversal (which will tell to the firewall that you will be connecting to the NAT ed private ip address).

3. Don't use AH (authentication header) in this use case. Because of AH encrypts whole ip packet in tunnel mode it wont work.

 

bigneo7
bigneo7Author
New Member
November 18, 2021

Hello @enasrullayev 

 

NAT will be configure at router?

enasrullayev
New Member
November 18, 2021

Yes.