Hi,

We are running pfsense 2.0 on our site and we are trying to establish an
ipsec to a partner with cisco ios. The problem is that the cisco side have
some requirements:
- All traffic from our side has to come from an public ip.

Meaning we have some servers on our local subnet that needs to send traffic
over the ipsec but the traffic has to come from an public ip instead of the
local lan ip of the server. Is that possible with pfsense 2.0? I have done
some tests with manual outbound nat rules with the following mapping:
Interface: WAN Source: Lan subnet Source port: * Destination: * Destination:
500 NAT Address: virtual ip (public) NAT Port: * Static port: YES

But when I for example connect to rdp to a server over the ipsec, it's
traffic from the lan subnet ip from our site that is logged, not the virtual
public ip. I tried an outbound rule just from LAN to WAN and to use the
virtual ip as nat address and that worked as expected. whatismyip.com showed
the virtual ip instead of the real wan ip.

So i'm just wondering if anyone here knows how to do this or if it even is
possible at all?

Thanks in advance
_______________________________________________
List mailing list
[email protected]
http://lists.pfsense.org/mailman/listinfo/list

Reply via email to