<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div>Hi,</div><div><br></div><div>I am running a mobile road warrior client with strongSwan connecting to a strongSwan gateway. The mobile client has two interfaces, one for an inside subnet and one for the WAN connection. Behind my mobile client on the LAN side, I have another host that I would like to connect through the mobile client using NAT. Kinda like if i used my laptop as a mobile hotspot for other clients to connect to and all their connections are sent to my strongSwan gateway. I tried to setup NAT using iptables with the inside interface and the outside interface and it does not work. I looked around on old emails and i think what i am looking to do is it NAT before ESP. I need to NAT my LAN client to the virtual IP address or the outside WAN interface before it gets sent down the tunnel to my strongSwan gateway. I
was looking at the older emails about the updown scripts but I can't find one for IKEv2 and charon. I also read that there was work being done on a leftnat parameter but work on it was halted.</div><div><br></div><div>Is there any way I can do this?</div><div><br></div><div>Thanks</div><div><br></div><div>Mark-</div></div></body></html>