I've found a problem after I use the VPN wizard to install RRAS on my ISA. It reverses the 2000 routing table, it shows the internal card as the gateway. Is this due to the fact that I have a working domain attached to the external card. I am testing ISA and the only way I can do it is to attach the external card to my company network to access the router. If i put the ISA as part of a workgroup the RRAS will not run because form what I can tell from the event viewer RRAS needs the Netlogon service, and the Netlogon service can only run if it accesses a domain. If I am right about the RRAS seeing the domain on the external card and reversing the gateway and the fact that the RRAS only works on a domain because of the Netlogon service then my only solution would be to add a DC on the internal network. What do you think? or if I'm incorrect about the RRAS issue letme know? Thanks mike