I notice that by default the VPN subnet mask as configured by SBS 2008
does not respect the CIDR subnet mask on the LAN. This means that you
can't VPN from a 10.0.0.0/24 LAN via two NAT routers to a 10.10.10.0/24
LAN because the routing table gets two routes for 10.0.0.0 instead of a
route for 10.0.0.0 and a route for 10.10.10.0. Is this by design? Should
I change RRAS to use a static address pool (e.g. 10.0.0.2-8/24), or will
that cause other problems?