Hey guys. I have finally been able to put a nice little LNS/PNS on our server. Here's the scoop... we are moving our TC's out of our main NOC to save on backhaul charges... the problem is that now that our TC's are going to live on separate networks, we have two dilemmas: Static IP addresses are unable to move freely between POPs, and we cannot offer content filtering. The solution, IMHO, is to make all our content filtered users use IP's from a static IP pool, and tunnel all these "portable" static IP addresses back to our main NOC, behind our filter box. So I built a linux box with lots of IP tunneling stuff, including PopTop (the PPTP server) and L2TPd. Our clients are supposed to not notice anything strange... except that it works. Their accounts are defined in our radius (I have two sample configs, one using L2TP and another using PPTP) using Tunnel-Type="PPTP" (or "L2TP") and Tunnel-Server-Endpoint="our LNS/PNS". No other settings have been changed on the USR-TCs at all. With PopTop, I compiled it so that it would give out addresses to specific users. Upon trying PPTP, the client dialed in, and a tunnel was created but PopTop complained that it doesn't understand Message type 9, an "Incoming-Call"... as it turns out, PopTop is not a PNS at all... but a PAC... it seems the Windows world got the PPTP implementation backwards and most vendors have it all backwards... so it looks like PopTop is a dead end. The client was unable to connect, so it dropped... yet the tunnel from the USR-TC to the PNS stayed up! Wierd. So I tried our sample L2TP client. L2TPd won't allow giving out Static's based on user, but I suppose I could code that myself. Anyway, the client connected, and a tunnel was built, but it looks like the PPP session dies. The client disconnects, yet the tunnel remains according to the Hiper ARC. At least the PPPd session appeared to give out a valid IP address. The server squawked about not having handlers for LCP, but PPPd gave me no real reason for dying. Anyway, I am stumped. Is anyone really using tunnels from the Hiper Arc successfully? Could post me some baby steps to help straighten me out? Thanx. ----Steve Stephen Amadei Dandy.net CTO Atlantic City, NJ - To unsubscribe to usr-tc, send an email to "majordomo@xmission.com" with "unsubscribe usr-tc" in the body of the message. For information on digests or retrieving files and old messages send "help" to the same address. Do not use quotes in your message.