lololala
Hello,
I would like to have following setup: A local LAN, gigabit-ethernet, where a few computers are connected together including a router/gateway which provides internet access. On the LAN all network traffic between the local computers are protected by IPsec (IPv6). The LAN is considered "mildly" evil.
Now there is a notebook, the road warrior, which is sometimes plugged-in directly to the local IPsec protected LAN, and sometimes connected via a OpenVPN tunnel to the router/gateway.
Ideally, in both cases the road warrior should appear with the same, local IP address (proxy ARP). But when the road warrior is connected via a OpenVPN tunnel, the road warrior has to encrypt each packet from and to the LAN twice. Once for the tunnel, and once for the IPsec thing.
Is this scenario possible? Is there any way to prevent the twice encryption? How to setup such a scenario cleanly?
