Ok, yet another VPN question... I have a small office connected to the internet via DSL. It uses an Actiontec gateway. I finally found out that the Actiontec will not pass GRE (protocol 47), so any attempt to use PPTP for a VPN connection from on user's house wouldn't work. I purchased a Linksys router with VPN capabilites (BEFSR41). The phone company said that I need to call them when I want to enable their Actiontec to pass all traffic in "bridge mode." Then I will uplink the Actiontec to the Linksys, and the Linksys will do DHCP, NAT, Firewall, etc... My questions are... 1. Do need 2 static IP addresses from the ISP--one for the Actiontec and one for the Linksys? 2. I've heard varying reports on using PPTP with this brand of Linksys...will it pass GRE (protocol 47)? I know it will forward port 1723 to the 2k server. 3. When setting up RRAS on the 2k server, do I attach it to the network card? I tried that and the internal clients couldn't browse the network. I also read where I should chose (no network card) when I setup RRAS on a 2k server. 4. The home user has a cable modem. Will I need to buy a similar Linksys router and connect it to the cable modem so the VPN will work? Someday, I'll learn. But man it's been frustrating so far. Thanks a TON for any input.

1.-- yes, you will need 2 public IP addresses. The Actiontec is the first point of contact from the WAN to your LAN. Even in bridge mode, it will need an IP public address on your ISP's network. Then, the linksys will act as your gateway to the WAN, so it must have both an internal LAN address (probably 192.168.1.254) and the public interface for your VPN. 2.---dunno 3.--Not sure I understand what you mean by attaching to the card. If you mean the server's NIC instead of the RAS adapter, then this might help answer it: http://support.microsoft.com/?kbid=162071