Hello community,
I have a case where I have to configure 3 Site-to-Site VPNs between HQ FTD (managed by FMC) and Branch FTD (managed by FDM).
But, the case is that in the HQ FTD I only have 1 public ip address, and a router before the HQ FTD which has 2 more public ip, is there any way I can build site-to-site VPN between HQ FTD and branch FTD using the 2 public IP I have in router as my remote peer from Branch FTD prespective but, somehow translating to the public IP I have in HQ FTD.
p.s the site-to-site VPNs have to be build only between HQ FTD and Branch FTD, as we know we can't configure 3 site-to-site VPN with the same remote peer. The Branch FTD has 3 public IP, so the problem stands at the HQ site.
I tried to use NAT Exempt on Branch FTD, by using the public IP in my router as the remote peer and than NAT exempt into my public IP of HQ FTD, the VPN is Active-UP, but my pc in branch site cannot ping pc in HQ.
Best regards,
BR
