[Openswan Users] NAT on ipsec tunnel is possible?

Domingo Antonio domingo at netcomp.com.br
Thu Apr 20 18:17:02 CEST 2006


Hi,

	I stablished a connection between my openswan and a cisco 3000s.
	
	On my side i have a 172.16.0.0/24 subnet and it needs to be natted
to access resources that is behind cisco.

	In my server i can acess all network behind cisco, but from my
network no...
	Default gateway from my network is my openswan box..

	172.16.0.0/24 -------------- [ openswan ] -------------- [ cisco ]
-------------- 1.1.1.1.0/24
	
	In my openswan there is no interface ipsec0...

	On eth0 i have my network, on eth1 my connection to cisco.

	I run this command.

	iptables -t nat -I POSTROUTING -s 172.16.0.0/24 -o cisco_network -o
eth1 -j SNAT --to 10.126.107.72
	
	10.126.107.72 = my vpn side ip...


	my question is?
	I cant nat my network 172.16.0.0/24 to access network 1.1.1.0/24????

Domingo



More information about the Users mailing list