This weather has made me think a bit about what happens when people cant get into work. Ive come up with a crazy idea to build a "kit" comprising a pre-configured router, IP Phone (with a POE Injector), and Laptop.

The plan is that the user takes the kit home, connects the router to his existing broadband, it is pre-configured to connect the WAN to the local home broadband via DHCP, then open up a VPN tunnel to the office network. This then allows the IP phone connected to the switchports on the router to connect to the office phone system.

The biggest struggle I can see is three fold.

can I make the 2910 tunnel from behind a standard NAT router?

can I use VLAN tagging for packets to match the VLAN configuration at the office?

can I forward DHCP packets to the server in the office?

Any thoughts welcome.