I want to set up clients that are behind NAT with a public IP but allow them to have one or more public IP's on their device. The idea is to have a Linux box with either 1 or two network cards. Let's take two for simplicity.

Router1 Loop back interface:
Router1 if1 -
Router1 static route: via
Router1 static route: via


Linux_box1 with two interfaces:

eth0: DHCP from router (IP will most likely be with default GW of
PPTP/L2TP or some other sort of protocol that will connect to the VPN server with.

The VPN servers IP will say be and the Linux box will have

I will then set up a GRE tunnel between and

The overall goal that I am trying to do is give clients a device that will be as if they are with me in the data center. They will connect a server to Linux_box1 as a router and go out to the internet. There is one other scenario where the Linux box will have a public IP however it won't be static from the ISP so it will still need the tunnel. However in this case there is no point in sending back the traffic via the tunnel. We would simply send it out to the internet.


You must log in to answer this question.

Browse other questions tagged .