VPN

good evening

i currently have a 3 port monowall running 1.3b11 with the following setup:
                                                             __ router1 --  NAT network
internet -- cablemodem -- monowall --|__
                                                                  router2 -- NAT network

the monowall has an inbound nat configured with a 255.255.255.248(CIDR29) subnet.
lan1 is in one subnet and lan2 is in the second subnet.

has someone got me any hints on how i can get IPSec running from LAN to LAN, WAN to Router1 and WAN to a VPN Server behind Router1?

thanks for your help

Is there any particular need for Routers 1 and 2? Monowall should be able to handle all the routing you need.

unfortunately - yes

router 1 is a particular vpn router, which our other site also has - to maintain the best performance and reliability, we need to have the same type of machine on both ends of the tunnel/s (these wherent all too cheap either).

the router 2 is a wlan router, with a bit more than the standard home performance - i havent found any miniPCI cards with a comparable signal strength 

i indended to go the outbound nat way, where i think i wouldnt have such a problem - yet i have no clue how to get the outbound nat configured, if i get my ip's over a dhcp (from the provider)

might there be a way by setting multiple public wan ip's on the wan interface and then sort of map them over the lan interfaces? as mentioned, i tried outbound, inbound, 1:1 and server nat, i also took the arp proxy into account, yet im a bit clueless abound the howto