use a gre tunnel. i have a tutorial here on it. http://www.spinthiras.net/2007/11/24/vpn-via-tunnel-interfaces/ do that n run ospf on top. remember that tunnel ifaces are to be treated like normal ifaces, regards, mario