I'm trying to setup a VPN to a data provider. They cannot route RFC1918 private addresses.
I believe that the situation is similar to Possible to IPSec VPN Tunnel Public IP Addresses?
However, they also require that the VPN endpoint public address be different from the address connecting to their services.
If this was on-prem, I'd just have a route added that sends traffic for dataprovidernetwork/24 via the VPN.
We're in AWS though, and the IP addresses we get allocated are not from the same subnet. So I'm trying to work out how to have a client machine with a public IP of (e.g) 51.10.10.10 and a VPN server (e.g.) 18.10.10.10 and send all traffic from the client machine to the vendor network via the VPN server.
Is this a common pattern, and what's the right way to do this with something like OpenSWAN ?
0 Answers