You can accomplish what you want using IPsec plus NAT. Our routers support something we call VPN Virtual Host mode (it is not called that anywhere in the WebUI) specifically for this reason. Essentially this is NAT’ing an IPsec tunnel endpoint so that every remote site can have the same subnet as you have here. You create a “virtual interface”, say on VPN0, assign it a virtual IP address and then NAT through it. For example:
- Go to IP Port Forwarding and create a port forwarding entry for Interface vpn0 and forward through whatever traffic you want.
Mar 20, 2019