1:1 NAT on non-Meraki VPN

[Cyrus777]

Hello All,

I am setting up an IPsec VPN peer on a Meraki Site-to-Site VPN with a non-Meraki third-party firewall. They require us to use a 172.x.x.x subnet as our private network, and I need to translate our internal 10.x.x.x IPs over the VPN tunnel. Since Meraki does not support 1:1 NAT on IPsec to translate specific IPs for communication with the external party, what options do we have to accommodate this requirement without disrupting communication on our organization’s existing subnet?

[alemabrahao]

You can have a Linux system with StrongSwan and establish a tunnel with those servers.

With Meraki, you don't have many options when it comes to non-Meraki VPNs.

[PhilipDAth]

Ask them to perform the subnet NAT translation on their end.