OT: VPN Design Plan

Group,

Looking at VPN plan to NAT a handful of devices to merging company who does
not route RFC1918. They gave me a block of Public IP's to NAT our inside
hosts to, but what can I do to NAT and route those hosts?

1st thought was to do DMZ segment and another FW behind it to do the NATing,
but not sure that is the best or only option.

Any thoughts are appreciated.

Thanks,

-- 
Dennis Worth
"Of all men's miseries the bitterest it this: to know so much and to have
control over nothing."
--Herodotus
Blogs and organic groups at http://www.ccie.net