<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div>Hi,</div><div><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;">I posted about this about a month ago and gave up since nobody replied, I would like to get this working now. </div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;">I am running a mobile road warrior client with strongSwan connecting to
a strongSwan gateway. The mobile client has two interfaces, one for an
inside LAN subnet and one for the WAN connection to the strongswan gateway. Behind my mobile client on
the LAN side, I have another host that I would like to connect through
the mobile client using NAT. Kinda like if i used my laptop as a mobile hotspot for multiple clients to my strongSwan gateway.</div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;">Andreas responded telling me I needed to use the NAT up/down script here http://git.strongswan.org/?p=strongswan.git;a=blob;f=testing/tests/ikev2/nat-virtual-ip/hosts/moon/etc/nat_updown;h=aab1df687484362b2c16eaf6bd30d05b3590520a;hb=HEAD</div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif;
background-color: transparent; font-style: normal;">Now I really don't understand how to set that up and what the variables are supposed to be, I am confused since I use the virtual IP address which always changes so how can you NAT to it? There is no documentation on how to use the up/down script and I am not sure what the different variables are. I had tried different combinations and could never get it to work.<br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br>
</div>
<div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;">I have the LAN interface/ip address on my strongswan client that needs to be NATed to the road warriors virtual ip OR the interface that strongswan uses before ESP occurs.<br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;">If anyone could explain to me how to use the NAT up/down script that would be great,</div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: times new roman,new york,times,serif; background-color: transparent; font-style: normal;"><br></div>Thanks<br><br>Mark-<br></div></body></html>