Welcome to TP-LINK Tech Support Forum
+ Reply to Thread
Results 1 to 5 of 5
  1. #1

    TL-R600VPN - NAT all local LAN traffic destined for the VPN tunnel - Is it possible?

    Model :

    Hardware Version :

    Firmware Version :

    ISP : [/COLOR]

    Hello everyone,

    I am very new to VPN and the TP link routers an I am counting that someone here will be able to help.

    We are using TL-R600VPN router and some of our services have changed and will require vpn connection going forward.

    To make this short, I need to setup an IPSEC site to site connection with service provider and they require that we NAT all local traffic destined for the tunnel because it will only allow single IP address. Creating VPN connection following the instructions was fairly easy, but I am stock at the NAT part. I do not see any options for NAT in the router GUI.
    Is this scenario possible with TL-R600VPN?

    Thank you.

  2. #2
    Not much clear about your needs. For site to side VPN, it will only need the WAN ip of the Server side of each other. I don't think there has some relation with the LAN side.

  3. #3
    Hi Thank you for replying,

    I have no problem setting up the ipsec VPN but there is specific requirement that we NAT all local traffic behind single IP address before accessing the tunnel. Only that single ip is allowed over the tunnel. I need to NAT all my local addresses 192.168.1.1/24 to 192.168.126.xx/32.

    Thank you

  4. #4
    Quote Originally Posted by walterw View Post
    Hi Thank you for replying,

    I have no problem setting up the ipsec VPN but there is specific requirement that we NAT all local traffic behind single IP address before accessing the tunnel. Only that single ip is allowed over the tunnel. I need to NAT all my local addresses 192.168.1.1/24 to 192.168.126.xx/32.

    Thank you
    Do you mean you have another NAT device behind the VPN Server?
    Like "Client---NAT---VPN Server====VPN Server---Client"

  5. #5
    No,

    There are no additional NAT devices, i need to translate all of our local addresses 192.168.1.0/24 to single ip 192.168.126.xx/32 because that is the only IP address allowed over the tunnel.

    Thank you.


 

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts

Copyright 1996-2018 TP-LINK Technologies Co., Ltd. All rights reserved.