I have a branch with 2 Routers and 2 ISP. I need to forward port 443 from external IPs (1.1.1.1 and 2.2.2.2) to internal Server 10.0.0.10. Internal Server (10.0.0.10) is in Service VPN 10 and have direct internet access with DIA (NAT route to 0.0.0.0...
It could work, but I still need to NAT the client`s IP and add the route to that IP from R1 to R2, then check for ICMP redirect. Without NAT, client will connect from its public IP to both routers and I don't know which one the server needs to reply ...
I can't do anything from the server side, so the server will always answer to the primary router. So the main idea is to manipulate a source of incoming packets, to force the server to send replies back to the second router (or to some network inside...
