[strongSwan] How to access server side's private subnet via remote access

[Kris]

Hi, all

I got a remote access VPN server with config:

        left=%defaultroute
        leftsubnet=0.0.0.0/0
        leftfirewall=yes
        rightdns=8.8.8.8,8.8.4.4
        right=%any
        rightsourceip=10.8.6.0/24
        rightsubnet=10.8.6.0/24

The server has public IP on eth0, private subnet 10.11.1.0/24 on eth1,
how can I config Strongswan to let my remote VPN client could access
10.11.1.0/24, or it requires some other iptables firewalls tweaks?

Thanks a lot :)

--
Kris