> I this possibly? Certainly is; the most common method I've seen is to use l2tpns (which requires RADIUS) as your l2tp backend. You can then use either existing RADIUS servers that are off of your Active Directory, or you can use freeradius to connect to fulfill that purpose. RB