If only Bowulf has posted this a week ago. Took us all of the time we had for lab to get a 5-node VPN up and running.
Then again, it might not have. We finally figured out that d*mn Pix's had to be rebooted for the configuration to load properly.
In any case, it's a nice to have.