[strongSwan] Ubuntu strongswan server and tplink vr400 client

[lenovomi]

Hello,

I installed ipsec/strongswan server on my ubuntu vm box 10.0.1.156 (which
is behind 2 routers, so 2x nat, last router has public ip) and want to
connect to it from my router (acting as a client, tplink). Client router
has public ip (wan) and lan 192.168.1.0/24.

I am not sure how to setup ipsec.conf left,leftid,leftsubnet and
right,rightid, and right subnet. Left is vm box, right is tplink router.

Is it correct if i set left=%any4, leftid=10.0.1.156, leftsubnet=
10.0.1.156/32, leftfirewall=yes
and right(router) right=%any4, rightid=%any, rightsubnet=192.168.1.0/24

At tplink router i set Tunnel access from local IP addresses: subnet
192.168.1.0/24 and Tunnel access from remote IP addresses: single address
10.0.1.156/32


Basically what I want is that all clients behind tplink router nat ie
192.168.1.x will be able to ping / access vm box 10.0.1.156.

Thank you!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20191229/d28ead08/attachment.html>