Site 2 site VPN Device Behind a Firewall

[saroj pradhan]

Hello  Team,

can  you  please  help  me  to understand, if the  Site-A  VPN device is  Internat  facing and  Site-B VPN Device is  Behind another Firewall .

The outside interface of the Site-B VPN device is NAT with  Firewall.  Can the Site 2 site VPN works in this setup. Please guide.

    Site-A ------------------------------------------------------------------------Site-B

    Firewall VPN >-----internet ------------------------------------------------Internet < Firewall --- Firewall  VPN

Regards,

Saroj P

[Karsten Iwen]

That should work if both VPN-devices are of a recent firmware-version.

1. If Site-B has a fixed IP, then make sure you forward and allow all UDP/500 and UDP/4500 traffic to the VPN-firewall. The Site-A firewall has to use the public IP of the internet-firewall as the peer.
2. If the Site-B has a dynamic IP, then it still works, but the Site-B VPN-firewall has to initiate the VPN-connection.