OCI: How to Set Up Open Source VPN Server with a NAT Capability in Oracle Cloud Infrastructure (Doc ID 2495541.1)

Last updated on AUGUST 02, 2023

Applies to:

Goal

OCI provides Dynamic Routing Gateway for VPN connection, however, DRG doesn't support a NAT capability whereby some customer public IPs can be translated to private IPs in a VCN. So this document provides an alternative way to achieve it. There are two VCNs in this topology. The left VCN acts as OCI VCN. The right VCN tries to simulate the customer environment. However, in the real world, the CPE devices and the network on customer side may be more complex, so the right side network is just for simulation purpose. This article will mainly focus on the left side OCI VPN configuration. It elaborates the steps to configure open source VPN server openswan/libreswan on Oracle Linux 7 instance and how to configure the NAT rules on the instance.

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.