Openvpn tunnel on a ipsec tunnel
I need to establish a bridge over a IPSec tunnel (made by DSL devices that don't support tunnel-over-tunnel features or proxy arp to accomplish this point), besides that I've to manage some external connections (at present simple port forwarding, even vpn roadwarriors in the future). I'd like to implement all that by 2 pfsense between the dsl routers and the rest of the network. Can they work as transparent firewall that way? Can I manage the bridging tunnel and roadwarrior access by OpenVPN (from pfsense GUI) without problems? What are the best practice you'd suggest in a similar scenario? Thanks in advance.