How do I set up a virtual network interface in Ubuntu so that OpenSWAN will happily forward packets between a remote mobile subnet and sockets on the local virtual device?
This is my infrastructure:
mobile subnet <=> modem <=> L2TP/IPSec VPN tunnel <=> linux server (ubuntu) 192.168.127.*
I see that OpenSWAN supports IPSec VPN tunnels. But the problem is I don't want to connect the tunnel on the server side to my company's physical network. I want the server side to be sandboxed -- perhaps linked to a virtual network interface and subnet -- so that scripts running on the linux server can communicate with the mobile subnet, but rogue devices on the mobile subnet can't touch other company resources.