Forgot password?
 Register now

Welcome to use this form to feedback your problems with Ruijie Community

The category of your feedback

Your Feedback

Your Email address (optional):

How to configure IPsec VPN with NAT Traversal on firewall? Reply

GTAC-Sophia

Level 6

Ruijie Staff

How to configure IPsec VPN with NAT Traversal on firewall?
121 0 2024-11-28 10:23:52
Original
Service Demands

In a scenario of IPsec VPN with NAT traversal, static NAT (SNAT) needs to be deployed for Spoke A to initiate a connection with the hub site, and dynamic NAT (DNAT) needs to be deployed for the hub site. Figure shows the typical networking diagram.




Restrictions and Guidelines

  • In IPsec, the default port that supports NAT traversal is UDP port 4500. A custom port is not supported.

Prerequisites

You have completed basic network configurations, including interface IP address and routing information on routers and servers.

Using a Configuration Wizard

  • Configuring the Hub Site
(1) Perform basic configuration.

(a) Choose Network> IPsec VPN > Config Wizard. The basic configuration page of the configuration wizard is displayed.

(b) Set Scenario to Point-to-Multipoint, and set the other parameters according to the following figure.




(c) After completing the configuration, click Next.

(2) Configure authentication.

(a) Configure parameters according to the following figure.




(b) After completing the configuration, click Next.

(3) Configure interesting traffic.

(a) Click Create. Configure parameters for interesting traffic according to the following figure.




(b) After completing the configuration, click Next.

(4) Verify Configuration.

(a) After verifying the configuration, click Finish.





Configuring Spoke A

(1) Perform basic configuration

(a) Choose Network> IPsec VPN > Config Wizard. The basic configuration page of the configuration wizard is displayed.

(b) Set Scenario to Point-to-Point, and set the other parameters according to the following figure.




(c) After completing the configuration, click Next.

(2) Configure authentication.

(a) Configure parameters according to the following figure.




(b) After completing the configuration, click Next.

(3) Configure interesting traffic.

(a) Click Create. Configure parameters for interesting traffic according to the following figure.




(b) After completing the configuration, click Next.

(4) Verify configuration.

(a) After verifying the configuration, click Finish.



RG-WALL Z Series

Configuration Firewall
There are no replies.
Related Posts
Product Model

Share this topic to

Cancel

This site contains user submitted content, comments and opinions and is for informational purposes only. Ruijie may provide or recommend responses as a possible solution based on the information provided; every potential issue may involve several factors not detailed in the conversations captured in an electronic forum and Ruijie can therefore provide no guarantee as to the efficacy of any proposed solutions on the community forums. Ruijie disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Ruijie Community Terms of Use.

More ways to get help: Visit Support Videos, call us via Service Hotline, Facebook or Live Chat.

©2000-2023 Ruijie Networks Co,Ltd