NAT TRAFFIC

Started by cosmin alexa, December 12, 2023, 12:59:41 PM

Previous topic - Next topic
Hi,
I'm pretty new with opnsense, so before to make any change, i would like to know if i'm going right.

Situation:
I have two customers with same network, site to site ASA-customer; for customer1 we have done an internal NAT.
costomer1 10.100.0.0/16 NAT to 10.110.0.0/16 gw Cisco ASA
customer2 10.100.0.0/16  gw cisco asa

Users connect in VPN to opnsense, based on permission and rules, the traffic goes on Cisco ASA or AWS.

customer1 needs to be moved from Cisco ASA gw to defauld gw (AWS).

How should i configure the NAT in order to let users reach cosutmer2 on 10.100.0.0/16 and customer1 on 10.110.0.0/16 ?

Should I maintain customer1 inf firewall:alias on 10.110.0.0/16, and in NAT, to set as in the following?
Interface: LAN
Source: any
Source Port: *
Destination: 10.110.0.0/16
Destination Port: *
NAT Address 10.100.0.0/16
NAT Port: *
Static Port: YES

Thanks you for any feedback.