Well, my pair 'o WAP11 came in today. I love these things! Still waiting on my Female RP-TNC -> N Male cable (Friday!) so I can have real fun.. but these rule! Got a test box set up now, so I can play with wireless.. eth0 is public, eth1 is the private wireless network. Got iptables set up so that only DNS, DHCP, and IPSec are allowed through eth1. Then, set up masquerading so the box will masquerade clients connected via a IPSec tunnel. So, set up win2k to use ipsec for 0/0, ping an address, ipsec link comes up, and surf away, 100% encrypted! I love this stuff! -- Nate Carlson <natecars at real-time.com> | Phone : (952)943-8700 http://www.real-time.com | Fax : (952)943-8500