-###
-### Avoid IP address collisions between NAT and virtual links.
-### Virtual links have addresses 10.A.B.[23], where A < B always.
-### So make sure that A > B for NAT.
-###
-if [ $KEY > $NODEID ]; then
- BASE="10.$KEY.$NODEID"
-else
- BASE="10.$NODEID.$KEY"
-fi
+#
+# OpenVPN uses addresses in 10.<nodeid>/16 block. Avoid collisions with
+# this block. NAT interface is not advertised and so does not require
+# unique address throughout the topology. But the address of each slice's
+# NAT interface must be unique on a single node.
+#
+BASE="10.0.$KEY"