<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<font face="Helvetica, Arial, sans-serif">Hi all. I am searching the
internet for days to find some information on how to setup a
site-to-site VPN via a central server.<br>
Maybe someone can point me in the right direction or to the right
HowTo?<br>
<br>
We have two home networks running on OpenWRT routers with dynamic
IPs and I have a virtual server on the internet with Strongswan.
Authentication is done via Certs/Keys.<br>
<br>
192.168.0.0/24 -- 192.168.0.1 </font><font face="Helvetica,
Arial, sans-serif"><font face="Helvetica, Arial, sans-serif">(gateway/nat)
</font>== vpn.example.org == </font><font face="Helvetica, Arial,
sans-serif">192.168.2.1 (gateway/nat)-- </font><font
face="Helvetica, Arial, sans-serif">192.168.2.0/24<br>
vpn.example.org has a static ip address and a network card.<br>
<br>
There are basically 2 separate questions:<br>
1. Do I need to setup ip route on vpn.example.org? <br>
2. What are the right iptables to route traffic from the two home
networks to each other?<br>
<br>
Maybe there are other solutions for this problem. <br>
But since I did not find so many solutions on the Internet I am
particular interested in this solution.<br>
Alternatively I could use DynDNS on both gateways, but this would
be too easy, wouldn't it?<br>
<br>
Best regards<br>
Martin<br>
</font>
</body>
</html>