Connect to server at localhost port 5050 App Client App Server Destination Port: SSH Session to 10.0.4.1, SSH tunnel all traffic to port 5050 to destination Client SSH Server 10.0.4.1 port 6060 Destination Address: Destination Port: IPSec transport all TCP traffic to 10.0.4.1 Host OS A Source Address: 10.0.0.1 Destination Address: Destination Port: 10.0.0.2 Apply NAT on all Router1 Source Address: traffic leaving 10.0.1.1 Destination Address:, 10.0.1.1 10.0.1.2 Destination Port: Router2 10.0.2.1 10.0.2.2 Router3 All traffic going to 10.0.4.1, apply IPSec tunnel from 10.0.2.1 to 10.0.2.2 Source Address: Destination Address: Destination Port: 10.0.4.1 10.0.4.2 Host OS B Router4 10.0.3.2 . . . Source Address: Destination Address: Destination Port: Source Address: Destination Address: Destination Port: . . . Source Address: Destination Address: Destination Port:, Source Address: Destination Address: Destination Port: 10.0.3.1