EFW Support

Support => VPN Support => Topic started by: mmiat on Friday 20 September 2013, 03:16:23 am



Title: Source NAT
Post by: mmiat on Friday 20 September 2013, 03:16:23 am
Hi

I've configured an ipsec vpn between me and a customer (so I don't have access to his gateway)

my lan is 192.168.10.0/24, his is 10.128.0.0/12. however, he told me to source nat my ip addresses to 10.143.144.0/29

but when I try to configure it in EFW, it tells me that source netmask and mapped netmask have to be same length. How I have to do / fix it?

Thanks


Title: Re: Source NAT
Post by: mmiat on Sunday 06 April 2014, 08:25:59 pm
solved
using shell this rule works:

Quote
iptables -t nat -I SOURCENAT 1 -j NETMAP -p tcp -s 192.168.10.0/24 -d 10.128.0.0/12 --to 10.143.144.113/32

this time endian sucks, linux rulez ;)

now I have to find how to start this rule when system boot or endian web interface change something