The remote lab is accessed via a PIX firewall, RL-PIX-CSPFA, from the Internet. The trainer will initiate an IPsec VPN tunnel terminating on RL-PIX-CSPFA. RLPIX- CSPFA forwards all traffic to a router, RL-RMT-CSPFA, which routes traffic based on the source IP address to one of three routers, RL-RMT1-CSPFA, RLRMT2- CSPFA, or RL-RTS-CSPFA. These routers will perform IP address NATing and route the traffic to the necessary student pod.