A customer needs to build a VPN over Internet between two offices which both use the net 192.168.1.0 /24 as local Private LAN. I wanted to set up a Eth/Eth Router as internal IP-Packetfilter inside each local Network and doing a NET NAT (NET MAP). For this I would define HelpNet 1=192.168.255.0 /24 and Helpnet 2=192.168.245.0 /24. So a client of office 1 has to connect 192.168.245.10 if he wants to reach the 192.168.1.10 of the remote Private LAN of office 2. But I am not sure if this will work cause I need to NAT in both directions but cannot define INSIDE AND OUTSIDE NAT at an Interface (which would be needed!!) Maybe someone has a better idea?? Many thanks in advance. Matt