From: ssnewsfiles@hotmail.com   
      
   this is for a MSFT infrascture... so if you're not on a MSFT infrastructure,   
   you might as well ignore this, because i don't have experience with a cisco   
   getup.... yet.   
      
   remember, a VPN RAS server allows an interface different logical addresses.   
   one address is assigned to deal with the intranet segment, while the other   
   is the addresses assigned to the RAS VPN connection.  so durring your   
   transactions, it's that VPN address that's used, not the local address.   
      
   do this, i dunno if you're on a msft machine, but when you establish the   
   tunnel type "ipconfig /all"   
      
   you'll see there are two addresses.   
      
   i don't mean to patronize, so don't think of it like that (and just roll   
   with it for the sake of concept... vs. possiblity) ... but very crudely   
   think of a VPN as dial-up RAS connection within a parent RAS connection.   
   the first establishes a network and puts a setting in place, then the second   
   does the same and again puts a second set of settings in place.   
      
   if you ever play around with a 2000/2003 server, you'll see this first hand.   
   there is the need to assign an address range for the RAS connections.   
      
   and to answer your question about static addresses...  according to MSFT,   
   you do need to place a static route for "off-subnet address range(s)"   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)