Skip to main content

Can I ping public IPs with IPSec?

Yes, but the NATing and routing has to happen on yours side of the IPSec connection.

Jakub Kubinski avatar
Written by Jakub Kubinski
Updated this week

Environment

  • IPSec

Question

  • Can I ping public IPs with IPSec?

  • Can the device ping public IP addresses when a SIM is paired with an IPSec connector?

  • Does it matter whether the IPSec connector is connected or disconnected from the sim card when pinging public IPs?

Answer

Yes, but the NATing and routing has to happen on your side of the IPSec connection.

Cause

When a SIM is paired with an IPSec connector, Onomondo (by default) routes all traffic into the tunnel, unless selective routing is configured.

If no route exists for a given destination (e.g. 8.8.8.8) within the tunnel, the packet will likely be dropped unless your IPSec endpoint is configured to NAT and forward public internet-bound packets.

If you want to allow devices to ping a public IP address while still using IPSec for internal IP ranges, you'd need to configure your IPSec endpoint to act as a NAT router to the Internet.

Did this answer your question?