Set up site to site VPN with NAT

[cid1]

Hello,

I am pretty new to sonicall and I am having an issue with a remote site. Our home office has a NSA 2400 and our remote site has a TZ 100.

Here is my delima,

This remote location is very remote. Our internet provider is actually a wireless provider with an antenna on the roof. Their setup is an antenna attached to their own router that our TZ 100 is plugged into. We need to set up a ipsec network with NAT translation because the external address of the TZ 100 is not a public ip address. The company does not have the ability to put their own router in stealth mode.

So I guess I need to know how to set up a vpn that includes Nat Translation. Does anyone have any experience with this?

 

[SonicsRule]

With one end of the VPN likely dynamically IPed you will at very least need to run the VPN in aggressive mode.

With the double NAT at the remote site and your TZ100 WAN not public, your best chance is to run manual "Manual Key" I have done this in similar situations and it works quite well.