-
Trouble Establishing Site-to-Site VPN from Double NATed SonicWall to OPNsense in
Hello,
I am currently facing a network configuration challenge related to setting up a Site-to-Site (S2S) VPN from a double NATed SonicWall device in my facility to an OPNsense firewall in the cloud. Here’s the scenario:
-
I have a SonicWall device in my facility, which is double NATed due to an additional wireless router for internet failover purposes.
-
I aim to establish an S2S VPN connection from this double NATed SonicWall to vultr.com cloud.
-
When I use a SonicWall in the cloud, I can successfully set up a S2S VPN, problem is that I was unsuccessful in running Sonicwall NSV in Vultr.
-
When I attempt to establish a VPN connection with the cloud-hosted OPNsense firewall, it doesn’t work when my facility Sonicwall is double NATed
I am seeking advice and guidance on how to overcome this:
-
What configurations or adjustments should I make on both the SonicWall and the OPNsense firewall to establish an S2S VPN connection from a double NATed SonicWall device to the cloud?
-
Are there any additional considerations or best practices to follow in this scenario to ensure a stable and secure VPN connection?
I would greatly appreciate any insights, suggestions, or experiences from the community that can help me resolve this issue. Thank you for your assistance.
Best regards,
-
This discussion was modified 2 years, 6 months ago by
Shaya Weinfeld.
-
-
3 Replies
-
assuming cloud firewall is directly on the internet and not behind NAT?
assuming cloud firewall is static address?have the onsite sonicwall be the initiator for the vpn, not both sides.
SSL vpn should be fine. IPSEC will get finicky
-
Thanks, David,
You assumed right, I did try to have the SonicWall be the initiator but not with SSL VPN, is that possible for an S2S VPN setup?
-
-
Hello,
I suspect the issue is with the perimeter firewall (with the first NAT being performed) not having the proper route to the 2nd NAT’d network. I don’t usually work on Sonicwalls but a quick google search shows these 2 posts that you may want to take a look at:
https://community.spiceworks.com/topic/2306441-sonicwall-ipsec-behind-nat
Hope this helps.
Dan
Log in to reply.