NAT a single host over IPSEC
Hopefully a simple question. We have a site to site ipsec tunnel in place, working fine. However i need any traffic from/to a remote host within the remote subnet to appear as an IP address which is part of my local network. i.e. remote host is 172.16.1.1 on the tunnel, but i want all of my local clients to be able to communicate with that host using ip address 192.168.1.1.
I guess it can be done in some way using a virtual IP on the inside interface, but not sure on how to get it to NAT?