| Description | This article describes how to configure source NAT in FortiGate A for Syslog traffic that needs to go through the IPsec tunnel to reach the Syslog server behind FortiGate B. |
| Scope |
Network setup:
|
| Solution |
The site-to-site tunnel is up and running between 'Fortigate_A' and 'Fortigate_B'. The traffic between 192.168.100.0/24 and 10.220.8.0/24 is allowed to go through the IPsec tunnel.
The IP pool, 192.168.100.1-192.168.100.254, has been created for local LAN traffic source NAT.
For the Syslog traffic, configure a loopback interface with the source NAT pool's IP.
The lookback interface IP is used as the syslog source IP.
The Syslog traffic is permitted by the phase 2 selector and forwarded to the Syslog server at the remote site.
|
