yes it is posible but question is why you want to terminate VPN on router instead of Firewall. Maybe firewall is not VPN capable?
With your scenario you can make NAT on firewall so your router will have public IP and then you can establish VPN to this router from internet. Also inside hosts will have access to the internet if you want to do so.
Since you have 6 usable public ip addresses and since you indicated you could terminate the ISP connection directly into the firewall, the easiest way is to terminate the ISP connection into a small switch then connect the firewall and external router interface to the same vlan on the switch. The. Assign appropriate ISP gateways and public ips to the external interfaces of both the firewall and the router.
This document gives several answers on frequently asked questions for PFRv3 channel state behavior.
Q1: What are all the channel operational states from a BR (border role) perspective and what are the rules/conditions to be in each st...
The need was to reach an host inside a LAN through a VPN connection managed by the LAN gateway (Cisco 1921).
The LAN gateway performs NAT and there was a dedicate nat rule for the host i wanted to reach through VPN.
I couldn't connect to the hos...
We have 3 identical switches configured by someone else and would like to claim some of the Gigabit ports(G1/G2/G3/G4) for use on servers. When we try to change the wiring and configuration, we run in to connectivity issues. Attached is a des...