Is like that, I far terminal network IPsec 192.168.88.1/24, local subnet 192.168.8.1/24, and I LAN port address of the router is 192.168.9.1/24, computer Ip

Set to 192.168.9.100, I added a snat in router, converting 192.168.9.100 192.168.8.1, but my computer can't 192.168.

88.1/24 of the segment, but into the router background can ping the network segment, then baidu says it is the problem of NAT through, so I ask here, a great god, is

Is not this kind of method is not feasible

CodePudding user response:

Theory is IPsec IP packet encryption, head will be parsed later found that the source address is wrong, just dropped the newspaper article to end, if so, what's the good solution yet

CodePudding user response:

NAT is always come in pairs, you configured snat, check whether there is a corresponding dnat let the response returned can reach your computer,