Hi Jakob,

have a look at the following example scenario

  http://www.strongswan.org/uml/testresults/ikev2/nat-rw-mark/

which applies source NAT to two identical subnets using XFRM marks.

Best regards

Andreas

On 03.12.2012 16:40, Jakob Curdes wrote:
> .. I have done quite a bit of research but I did not find a description 
> for my layout; or at least I did not find one which I understand to 
> describe my problem.
> 
> I (will) have several roadwarriors with the same internal subnet; they 
> will all have to connect to one central IPSec hub. I need connectivity 
> in both directions, so a source NAT (done e.g. by updown script) does 
> not really help here as far as I see. I know that e.g. with Cisco you 
> can do a "two-way NAT" thing so that we can distinguish the subnets by 
> moving them on the client side. What would a solution with IPSec tools 
> look like?
> 
> Regards,
> Jakob Curdes

======================================================================
Andreas Steffen                         [email protected]
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to