>I have a similar situation . . . . . but not with "Mobile Clients" . .
. .  
>I wrote the below setup before I realized your config does not >locally

>define what IPs are sent over the connection . . . . . you may be >able
to 
>set up the remotes with 2 mobile tunnels each to the corporate >LAN . .
.

Since my remotes are on dynampic IP's, they HAVE to make the connection
FROM them TO Corporate.

>Do all 3 locations have Monowalls?

Yes

>you have to add IPSEC tunnels to each remote using the other >remote's 
>subnet:
>Remote1 IPSEC on the corporate Monowall has 2 tunnels:
>    172.16.x.x(corporate)<->172.18.x.x(remote)
>    172.19.x.x(corporate)<->172.18.x.x(remote)
>Remote2 IPSEC on the corporate Monowall has 2 tunnels:
>    172.16.x.x(corporate)<->172.19.x.x(remote)
>    172.18.x.x(corporate)<->172.19.x.x(remote)

This makes sense, and I have it setup this way now, but still can't get
remote to remote communications.  Perhaps this is since it is "Mobile
IPSEC"  Anyone have more input?