When you configure the Juniper box you will assign an internal IP address pool. You will also assign an external IP address which is reachable from the Internet and configure your firewall to send connections for that address to the DMZ which your VPN will pick up. Once the connection reaches the VPN it will assign that user an internal IP address from its configured pool and your internal LAN routing takes it from there. So to answer your question the return traffic comes back to the Internal IP address assigned by the Juniper IP address pool. The Juniper box keeps track of which external connection it assigned that internal IP address to and automatically sends it back out to the correct user across the Internet. Roy Kestler ... View more