This situation is very common. In that case the best way to do is: 1.
Configure the VPN in mode interface. 2. Create a VIP for a virtual LAN
(the ' virtual' subnet that peer is going to reach in the VPN). 3. For
input traffic use the VIP (destination...
Hi, I guess that this configuration is possible to create. You only
ensure that in the VIP the port forwarding will be enable (to prevent
the direct association in the VIP, for the inverse traffic).
VPN concetrator give you the option to create a hub and spoke VPN, used
mainly in some distributed topologys, where you need to centralize
resources and access them by a secure connection.