I use RouterBoards for remote support to oure customers. To have only minimal dependencies on the local internet-access I use OpenVPN via Port 443. So, I have now my company-Net (for example 172.16.0.0/24), my OpenVPN-Nets (for examle in the range 100.64.124.0/24) and my customer-nets (for exemple 192.168.1.0/0). Now it can happen, that 2 customers heve the same net outside and I can’t route to both at same time.
So I want to make a IP-Mapping. I want to create 2 Mapping-Networks (for example 100.64.125.0/24 and 100.64.126.0/24). Now I want to map this networks to the destination networks by using Source- and Destination-NAT. Thats not the problem - I did this already in othe situations.
But how do I create my Mapping-Network at the Router. Should I give the OpenVPN- or the WAN-interface a second IP, or its’s a better idea to create a VLAN (how do I create a VLAN which is working only internal)?
Niels