On 04/28/2011 08:00 AM, Adam Stasiak wrote:
> Nice and simple but unless I'm missing something I don't think it would
> work. The remote firewalls FW2 and FW3 would have no idea of which VPN
> tunnel to use (FW1A or FW1B) since they both share the same subnet (
> 10.100.1.0/24). Obviously I can split the site into subnets (10.100.1.0/25and
> 10.100.1.128/25) or something like that, but at that point I'd rather deal
> with static routes on the client PCs. Am I missing something here, or is
> there some way to make the above work?

It is not the route from them to you, but from you to them.  FW1B has no 
route to FW2 or FW3.  A static route may work, but only in the proper 
order...

			Lee