VPN Tunnel trough 3rd Party Firewalls

[Patrick Werner]

Hello Community.

As i know VPN doenst work well with NAT and PATon 3rd Party Firewalls.

We have two site every site has a single IP Adress in the Internet, every Site has a Vigor Draytek Firewall. The ASA's are direct behind the Vigor Drayteks.

                 <--------------------------------- VPN Tunnel ------------------------>

Site1 -> ASA -> Draytek Vigor -> INTERNET -> Draytek Vigor -> ASA -> Site 2

Is that possible, will that be stable ?

Thanks patrick

[Julio Carvajal · Accepted solution]

Hello Patrick,

I would say that you could use NAT-Traversal to make it happen.

As you already know ESP/AH do not have any ports so you cannot use them with PAT, that is why you must use NAT-T

Regards,

Remember to rate all of the helpful posts

Julio Carvajal