Description
This describes how to enable bidirectional subnet-address translation inside an IPSec VPN tunnel. The natip attribute, when used with the outbound NAT feature, enables one-to-one subnet-address translation inside the tunnel.
The file attachments include the associated configuration files.
Refer to chapter 'How to work with overlapping subnets' in the FortiGate IPsec VPN guide, located at http://docs.fortinet.com
FortiOS 4.0 MR3:
http://docs.fortinet.com/fgt/handbook/40mr3/fortigate-ipsec-40-mr3.pdf
FortiOS 5.0.x:
http://docs.fortinet.com/fgt/handbook/50/fortigate-ipsec-50.pdf
