I had a question. We are trying to get a user to access our internal network via VPN. That user is on a DSL connection and has the VPN software installed. Her DSL router is configured with NAT which uses a dhcp pool to assign an IP to the machines on the internal LAN - her internal interface address is a non routable private 10.0.0.0 network , her personal computer's IP address is 10.0.0.2 and NAT is being used to mask the private IP and make it routable via a public IP. However, our company LAN is also using the same private non routable 10.0.0.0 range. How will her VPN connection get activated when she tried to access a resource that is on our network. That is our problem...the VPN connection never kicks off since it assumes that all network objects that have the same destination network address are on her local LAN and does not get across the router.

[FW1] VPN via NAT