Update ipsec-s2s-binat.rst

pull/12/head
Michael 6 years ago committed by GitHub
parent 5db64c8eb6
commit 7ff7bcc8fb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

@ -2,7 +2,7 @@
IPSec BINAT
===============
Let's say company A has local LAN 10.0.1.0/24 and company B has local LAN 10.0.2.0/24.
Assume company A has local LAN 10.0.1.0/24 and company B has local LAN 10.0.2.0/24.
Also we assume that on both sides the other networks are already in use, e.g. in company A the network 10.0.2.0/24 is used for Voice and in company B network 10.0.1.0/24 is used for Guest Wifi.
We have to define new networks for the Phase 2 with unused ones and create NAT entries to reach the final systems.
@ -13,6 +13,6 @@ This allows the NAT process to speak with the Security Policy Database.
Finally we have to create NAT entries since a client in LAN A (10.0.1.10) tries to reach 192.168.2.10, but this address has to be rewritten to 10.0.2.10 on Firewall B.
Create the rule like in the screenshot and vice versa on Firewall A and you are good!
Create the rule like in the screenshot and vice versa on Firewall A:
.. image:: images/opnsense_nat_binat_ipsec.png

Loading…
Cancel
Save