Btw - reading this doc leads me to the understanding that this VPN implementation is designed for the following use case only:
(please correct me if I am wrong - I wish i was wrong)
- You work in an office with BES.
- Your office also has wifi.
- Your BES server is reachable from the wifi LAN.
You implement this VPN so that your wifi BB can talk securely/directly to your office BES server through your office wifi.
(Without this VPN, your BB talks through wifi out to the internet and then comes back into your BES server. Implementing this VPN cuts out the middle-man portion and keeps the BB-BES connection local.)
-Dan