> It's a disaster so far. A good-looking alternative (if we can't or don't want to use IPsec) is OpenVPN, <http://openvpn.sourceforge.net/>. Uses UDP for tunneling, so should be able to cope even when the ISP firewalls IPsec packets (eg, if VPN is against their TOS for residential accounts).