Hi, > My thinking was to use radsecproxy->freeradius (my nas, coova, supports radsec). > > Any comments on ipsec vs radsec? RADIUS with TLS over TCP (what some define as 'RADSec') is good. cant wait until all mainstream RADIUS servers support it natively. until then, RADSecproxy will do what you want.... alan