[strongSwan] vpn to connect public address in amazon aws and juniper

[one1 at tutopia.com]

 Hi everyone.



 I have successfully connected my amazon vpc instance  and a external 
 juniper device   (mobile operator) in ikev1.
 i dont  have acces to  the juniper  device .


 my netowrk configurarion  is like





         
 my_server_local(b.x.x.x)(10.0.0.14)===my_server_vpn(a.x.x.x)(10.0.0.178) 
 ---- {internet} --- juniper(c.x.x.x)===172.16.108.0/23



 a.x.x.x  its  my public  ip  for  vpn (left)
 b.x.x.x its a public ip  for  another instance
 c.x.x.x its a public ip  for  juniper (right)


 follow the  strogswan guide for amazon  y get  the  tunnel up.

 but need the range (172.16.108.0/23)  behind the juniper  get connect  
 with my ip b.x.x.x  (10.0.0.14), thats its the  ip
 config in the juniper to target in my server.



 looking in  the iptables  list

 have only

 ACCEPT     all  --  172.16.108.0/23      localhost            policy 
 match dir in pol ipsec reqid 16384 proto esp
 ACCEPT     all  --  localhost            172.16.108.0/23      policy 
 match dir out pol ipsec reqid 16384 proto esp


 was thinking in  do  a nat  in my_server_vpn pointing to  
 my_server_local


 there are a possibility  of strongswan  do this  route ?


 Any  ideas  are  welcome ?


 Julian