[AF] Configuration of inter-tunnel NAT prompts an error: No record corresponding to the proxy subnet Network Segment 172.16.2.0 can be found in the Subnet IP pool!

Problem Description

When configuring NAT between tunnels and manually filling in the proxy Subnet segment, an error message is displayed: No record corresponding to the proxy subnet segment 172.16.2.0 can be found in the Network Segment Subnet IP pool!

Warning Info

754155e9d83b4abf47.png (33.98 KB)

Process——

1. Check [Network] – [IPSec VPN] – [Local Users] for the corresponding user's tunnel NAT configuration. The user manually filled in a proxy Subnet Network Segment
   
   892605e9d8458e0f64.png (28.89 KB)
2. Check [Network] – [IPsec VPN] – [Virtual IP Pool] Medium no corresponding Virtual IP Pool is found.
   
   67765e9d84c5c97f2.png (129.05 KB)

Root cause

The virtual address segment corresponding to the branch user proxy subnet segment is not added to the headquarters ipsec vpn virtual address pool

solution

Add a virtual address segment corresponding to the branch user proxy subnet segment to the headquarters ipsec vpn virtual address pool

279695e9d8571a66b8.png (129.77 KB)

Original Link

https://support.sangfor.com.cn/cases/list?product_id=13&type=1&category_id=873&isOpen=true