I started to configure the box, but then had a thought. What happens with regard to DHCP?
If they did a request from their network what would the GB1000 assign them? I know it cannot be routed as the Gateway interface will be different - but being paranoid, what if they could craft something using OUR address once they had that information (if it was assigned). Is it best to do DHCP another way, or just assign the PC's addresses (not really great as visitors with laptops from HQ want to plug in and play).
This should not be a problem. Since the second PRO interface for them has to be in a separate subnet, the gb-1000 will serve up addresses to their clients in that separate subnet. Even if they statically configured a host with a bogus address (e.g.one of your PRO network IP's), the gb-1000 will reject it as a spoofed packet.
