How to change IPSec connection ports on PfSense?

Question

Network administration

Good afternoon.
There is a task to connect two gateways with a PFsense tunnel to each other.
The problem is that on one side the gateway (Gateway-1) is behind NAT. You need to redirect ports, but redirecting standard ports (500, 4500) will not work.
Is it possible to force Pfsense on the other side (Gateway-2) to initialize this particular connection on non-standard ports? And if so, how? Moreover, several tunnels have already been raised from Gateway-2 to other objects on standard ports.

Answer 1

IPSec behind nat works extremely problematic (two clients behind one nat), so it's better to look towards openvpn