Just an update as schema is a total mess. customer-1 172.16.0.2/30 ------------------- 172.16.0.1/30 (nas0) rt-1 (nas1) 10.0.0.2/30 --------------- 10.0.0.1/30 (nas1) rt-2 oustside ------------------- 10.10.60.23/24 (eth0) rt-1 (eth1) 10.0.0.5/30 --------------- 10.0.0.6/30 (eth1) rt-2