[ale] VPN's

[Gary Maltzen]

First off, I'd suggest using different subnets at each office so that you
don't have to route EVERY packet across the VPN...

 Atlanta (10.0.1.*) intranet
   10.0.2.* - routed to 10.0.1.1
   10.0.3.* - routed to 10.0.1.1
   10.0.1.1 - Firewall/Gateway
     10.0.2.* - routed to Austin F/G via VPN
     10.0.3.* - routed to Canadian F/G via VPN

 Austin (10.0.2.*) intranet
   10.0.1.* - routed to 10.0.2.1
   10.0.3.* - routed to 10.0.2.1
   10.0.2.1 - Firewall/Gateway
     10.0.1.* - routed to Atlanta F/G via VPN
     10.0.3.* - routed to Canadian F/G via VPN

 Canada (10.0.3.*) intranet
   10.0.1.* - routed to 10.0.3.1
   10.0.2.* - routed to 10.0.3.1
   10.0.3.1 - Firewall/Gateway
     10.0.1.* - routed to Atlanta F/G via VPN
     10.0.2.* - routed to Austin F/G via VPN

-----Original Message-----
 From: Steve Tynor <tynor at outside.atlanta.twr.com>


 ...snip...

We're trying to set up a VPN between our Atlanta, Austin and Canadian
offices. Each office is running a private 10.0.1.* network, with a Linux
2.0.36 masquerading firewall.