OK, I'm just stupid. I am still a bit confused about the routing for vpn
traffic and getting traffic from branch office subnets onto the vpn. To
clarify lets use an example network and vpn setup:

home subnet: 192.168.1.x
vpn tunnel: 173.62.31.x (or whatever this nonroutable subnet is from Craig's
book)
BM38 server public address: 55.44.33.22 (fake for this forum)
BM38 server private address: 10.1.1.85
BM38 vpn is NOT SET FOR BM37 BACKWARDS COMPATIBILITY.
local router for routing traffic to branch office subnets: 10.1.1.1
branch office routers are 10.2.1.1 and 10.3.1.1 for subnets 10.2.1.0 and
10.3.1.0 respectively.

So, at home my vpn client has an ip on the 192.168.1.x subnet and gets it's
traffic tunneled thru 173.62.31.x. Now which address range to I use when
setting up a static route on internal router 10.1.1.1?? Do I point this
route to the vpn tunnel subnet, BM private IP, my home network subnet?? And
how about the routing table in the BM38 server itself?? Do I need to worry
about the branch office routing tables as thier default route is always back
to 10.1.1.1???

Chris.