Hi, 1. openswan or strongswan w/ x.509 certificate patches 2. L2TP patched version of ppp 3. kernel modules for IPSec, either native or openswan implementations as well as any other protocols we are likely to need (GRE etc etc). 4. iproute2 5. Our own custom made front end (possibly written in GTK+) that configures and Initiates/Terminates tunnels for openswan. Now, I haven't investigated OpenVPN - it may be that much easier to implement this solution with that piece of software - but honestly, I looked at your post and said - HEY I KNOW HOW TO DO IT. So lets try! - Mephistos