Configuring firewall A
To correspond to the IPsec policy, traffic has to come from the virtual network A Net-A-Virt and contact the virtual network B Net-B-Virt.
Ensure that the virtual and real networks have the same sub-network mask.
- Rule 1 allows translating traffic from real network A Net-A-Real to virtual network A Net-A-Virt before the IPsec module (Options column).
- Rule 2 allows redirecting packets going to virtual network A Net-A-Virt to internal real network A Net-A-Real.