afp548 is the bomb! I've been waiting for someone to put a GUI on top of this. I was really surprised that Apple would go ahead and advertise it's IPSEC capabilities without putting a GUI over it. Much props to afp548 for filling in the gap (it looked daunting!)