Mobile IPSec over OpenVPN possible?

[risotto]

I have a connection set up between two routers using OpenVPN, which works just fine. I'd like to connect a client behind router 1 to router 2 using mobile IPSec. Is that possible over the OpenVPN tunnel? I've also tried connecting to the WAN address of router 2, but I have problems doing that sometimes. It seems like router 1 won't always pass traffic properly for the ipsec tunnel. Is there some passthrough rule for IPSec that I am missing?

[jimp]

It might work if you bind the mobile IPsec to the LAN address of the far side, but I wouldn't hold my breath. You're bound to get into some … interesting routing with UDP and ESP. It might work, it may not.