client.lan 10.0.0.2 | |- 10.0.0.x/ | 10.0.0.1 VPN Endpoint server.example.com 192.168.0.10 | |- 192.168.0.x | 192.168.0.1 Firewall/Gateway 12.34.56.78 | (( Internet ))