VPN client --> router/firewall #1 --"the internet"--> router/firewall #2 --> VPN server