I post the figure again, The first scenario: # pptp_call ----------------> do NAT ----------------> (a client)------------------->[linux-box]------------------->(a vpn server) # Figure-1 The second scenario: # pptp_call ----------------> route ---------------> (a client)------------------->[routing-linux-box]------------------->(a vpn server) # Figure-2