Does FreeS/WAN support assigning a “virtual identity” to a remote system?
Some IPsec implementations allow you to make the source address on packets sent by a Road Warrior machine be something other than the address of its interface to the Internet. This is sometimes described as assigning a virtual identity to that machine. FreeS/WAN does not directly support this, but it can be done. See this FAQ question.