IPSec is built just for for establishing net2net tunnel among different routesr/firewalls… Go with it, and eventually switch to OpenVPN if you can’t find a working configuration.
I realized IPSec tunnel between zyxel appliance and NethServer. And a fork of IpCop and NethServer. Only matters to be sure about the data and settings for cypers, PFS, DPD.
The error in the log appears to be the following lines:
Apr 05 08:50:36 nethserver.mydomain.com pluto[23530]: "ipsec_ipsec-tunnel/1x1": route-client output: need at least a destination address
Apr 05 08:50:36 nethserver.mydomain.com pluto[23530]: "ipsec_ipsec-tunnel/1x1": route-client output: /usr/libexec/ipsec/_updown.netkey: doroute "ip route replace 192.168.16.0/24 via dev ens18 src 192.168.1.254" failed (Error: inet address is expected rather than "
Apr 05 08:50:37 nethserver.mydomain.com pluto[23530]: initiating all conns with alias='ipsec_ipsec-tunnel'
Apr 05 08:50:37 nethserver.mydomain.com pluto[23530]: "ipsec_ipsec-tunnel/1x1": cannot initiate connection without knowing peer IP address (kind=CK_TEMPLATE)
I have used $any for the remote IP as I will have multiple clients connecting not just one. I am hoping I can have multiple remote clients connected simultaneously?