I would like to hook up an office running behind a Debian NAT/Firewall to access a Nortel Contivity VPN switch. Is it possible to setup a gateway of sorts, instead of having to install the VPN client on all the [Windows] workstations? What I would like to do is for the workstations to not even notice the VPN is there, with the Debian box routing the traffic appropriately. I am running 2.4.18-686 and iptables. Thanks, Tim