remote connection to SAP(internet VPN) with Juniper Netscreen 5XT

53 Views

Hi,

I am now setting up the remote connection (internet VPN) with the network device Juniper Netscreen 5XT.

Since I am not a network expert, I met some trouble on it.

We have prepared 2 public IP address. 61.xx.xx.45/29 for SAP router and 61.xx.xx.46/29 for setting up the VPN tunnel.

And we use 192.168.1.10/255.255.255.0(for example) as the private IP address of SAP router, and use NAT to map 192.168.1.10 to 61.xx.xx.45/29...

Any way, although the VPN tunnel can be set up, I can not ping the SAP router@SAP side.

But with the help of SAP, I did the test, use 202.xx.xx.xx(public IP address) as private IP address of SAP router, and did not use NAT, and registered in SAP side,I can ping the SAP router@SAP side.

I also think that use NAT of SAP router is a normal way to settup the internet VPN.

What's wrong with it?

Would you please give me some suggestion on it?

Thanks in advance.

Best regards,

Randy