I’ve got a VPN (IPSec Site to Site) setup between two offices and it works great. I also have a static nat (port forward) on the external interface of my office for port 9100 that works as expected.
External if: forward 9100 to 10.0.0.151 on LAN for remote printing.
There is another printer located at 10.0.0.152 on the lan.
The server on the other end of the IPSec tunnel (192.168.1.111) sends traffic to 10.0.0.152:9100 and the router directs it to 10.0.0.151:9100
I’m baffled. I’ll post my config here after I sanitize it.