Firewall/NAT

Hi

I'd like to be able to connect from mobile client to my m0n0 wall using ipsec vpn.
It works at one place, where the m0n0 wall is also the firewall but at the other place there is a firewall between m0n0wall and the internet.
I connected the lan to the lan port and made a port forward (500 udp) to the m0n0 wall.

My site 2 site connection works using static routes, but mobile clients don't because i can't add any static routes for them.

any ideas?

Thanks
Ben


site 1 LAN - m0n0 - WAN ---- INTERNET ---- WAN - Firewall - LAN - m0n0 site 2