Do these two options do anything bad when they're not supposed to be enabled and they are enabled? is there any example of what exactly they do, or if we need them.
- My ipsec gateway is a VPC instance that is behind a NAT (10.0.10.0/24)
- I want to have a networking sharing machine that is behind a NAT (192.168.10.0/24).
- My road warriors may also be behind a NAT when they dial in.
Does this mean on the network-share<->gw, I use
rightfirewall? And, on the roadwarrior I use only
leftfirewall. I'm confused and I don't see any docs about when to use these things. All the docs say is that the create the iptables commands that I wouldn't understand if the docs were more descriptive, which they're not.
I'm using split-tunneling.