It's pretty much done except for the IPSec stuff, but that's just getting the right config options loaded in and is trivial. It's here if anyone is interested in seeing how it works. http://bart.4amlunch.net/misc/tunnels/ -brian