Setting up a VPN over multiple layer of nating??

[Chris Shafer]

Hello all,
I have a rather quick question I'm an trying to see if it is
possible to setup a VPN for my power-user boss that jumps across multiple
nat'ings. I've read the VPN howto and the VPN-masquerade howto so i know
get can work just going across nat'ing at each end ,but unfortunately at
the office and we dont have complete controll over the network. We're on a
colo T1 that were sharing with another company ( we the computer geeks
wanted a DSL line for just our office but the power-user strikes again and
when he heard T1 there was no way to stop him) they have control over the
very top level of the network and were not even sure how its setup all we
know is that the ethernet cable comes in to us and plugs into a hardware
firewall (sonic wall SOHO 3) they gave to us and configured for us. We dont
even have the passwords for it. We do have the ability to serve thing from
it because it's one-to-one natted to the internet. The power-user is
unwilling to just use sftp scp and ssh to work from his home he wants it to
be like he sitting there in the office and can use his XP laptop to browses
the network and get data from our samba server. If there is away to export
the samba to the internet at least with some semblance of security that
would work fine.

If none of this is possible would it be possible to setup a box to let him
dial-in and browses the network with his XP laptop. If so could some one
point me to a howto or documentation on how to do this.

Thank you,
Chris

-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GIT/CS/O>AT dpu s:++ a? C++++ UL++++$ P+ L++++>+++ E++ W++ N++ o?
K---- w--- O? M-- V-- PS+ PE Y++ PGP+++ t--- 5? X-- R- tv b+++ DI++++
D+++ G++ e- h!>++ !r* !y+>$
------END GEEK CODE BLOCK------