[strongSwan] Home network config

[Razza]

Hi all, I’m new to the list and am looking for a bit of advice. I’ve looked
around but can’t find any examples close to what I want to achieve, probably
because it’s flawed from a purists security view point. Anyway, I want to
use strongSwan in a home network environment, mainly so I can access home
network machines whilst I’m away. E.g. ssh to my asterisk server, RDP/VNC to
my partners machine etc.



My network is as follows –



192.168.10.0/24 -- | 192.168.10.1 | | Dynamic RIPE IP | -- Internet

  Home Network     |  Inside i/f  | |   Outside i/f   |

                   |         DSL/NAT Router           |



As I only have a single RIPE address on my DSL, I intend to port forward
necessary ports to a single interface on my strongSwan box.

My strongSwan box will have an address in the range 192.168.10.0/24. I would
prefer to have a singe physical interface if possible, but could have two.

When I connect from an internet connected machine (soon Win7, currently XP),
I would like to be allocated a virtual IP in the range of my home network (
192.168.10.0/24).


Is this possible?