Date: Mon, 16 Mar 2020 23:28:25 -0300 From: Cristian Cardoso <cristian.cardoso11@gmail.com> To: freebsd-pf@freebsd.org Subject: PF + IPsec Message-ID: <CAKeEC-LqP-dAFCeSkCnMLU-Qw-j0KxOXLQSmQzX2poLTKZ2W0Q@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
Hello I'm setting up a Freebsd server for ipsec vpn communication with strongswan and I'm having some difficulties in the operation The freebsd server's local network is 10.19.12.0/24 and can connect correctly to the network on the other side of the tunnel. I would like another network behind my server to connect to the tunnel as well. In linux I would nat the network that is arriving as follows: iptables -t nat -A POSTROUTING -s 10.0.0.0/8 -d 10.31.32.0/24 -j --SNAT --to 10.19.12.251 In FreeBSD I tried to run the rule as follows, but to no avail nat on $ LAN inet from 10.0.0.0/8 to 10.31.32.0/24 -> 10.19.12.251 Is there any other way to generate the equivalent of FreeBSD postrouting? Best Regards
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAKeEC-LqP-dAFCeSkCnMLU-Qw-j0KxOXLQSmQzX2poLTKZ2W0Q>