OK I had to bin the WRV54 and swapped it out for the BEFVP + WAP54g and I'm VERY happy with the WAP. It works extremly well, with such reliability. But, now on to the VPN setup. I've configured Sentinel and can establish a connection. Checked BEF log and SSH all ok. BUT several questions: 1. I see no IP address allocated to the Sentinel 'Virtual' network card when I call Ipconfig - so what IP has my client been assigned? 2. I guess because of the low level nature of Sentinel that it manages the routing as I can ping my local LAN fine - but there's nothing in the route table. 3. Why does the VPN connection drop regularly? 4. Why does the Sentinel 'Diagnostics' report everything's ok but I cannot establish a tunnel (ocassionally). 5. From the client why can't I 'Run' \\Local.LAN.IPAddress.of machine and bring up the LAN machine's shares? - do i need to enable Netbios over TCP/IP - how? Or do I need to link Client for MS Networks + File/Printer sharing too....no idea how to bond them...there's no Network icon for my VPN connection!!! Blimey...this isn't easy.... So, I can ping the local lan but that's it so far, oh and of course the connection regularly drops. One more thing - my BEF is a V1 hardware machine, looking through the firmware detail it appears that only V2 units are ICSA approved. The V2 has completely different updates and are more recent. Should I have been sent a V2 - only bought the unit last week....??? ??????????????HELP?????????????????????