Hi Jeff, I don't see how remote access VPN client can connect using MAC addresses. MAC addresses are only useful for directly connected networks. They're not globally routable so it doesn't matter what your MAC address happens to be for a remote access VPN clients. Using a so-called "transparent firewall" works on the layer 2, but I never recommend them because they cause more problems than they fix, IMHO. HTH, Tom Thomas W Shinder www.isaserver.org/shinder <http://www.isaserver.org/shinder> ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp <http://tinyurl.com/1llp> -----Original Message----- From: Jeff Sloan [mailto:jsloan@xxxxxxxxxxxx] Sent: Tuesday, October 28, 2003 9:15 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Did Anyone see this? http://www.ISAserver.org Thanks for the reply, but I have network devices that work on the layer 2 level, mac address only, and need a device that will forward that traffic across the internet to other mac address only devices. 3Com NBX phones in particular. IP can be added, but at a cost the company doesn't want to bear. I also need the multicast feature the phones use for conferencing, busy light, and such. Can ISA or the device you mention VPN mac address traffic like that? MAC address traffic is not routable (I was told) so when we set up our dedicated T1, so we set our routers to "Bridge Mode" to make one flat network on the same collision space (?) Jeff Sloan Network Administrator Cross Oil Refining & Marketing, Inc. 484 E. 6th St. Smackover, AR 71762 Phone 870-864-8688 Fax 870-864-8689 Cell 870-866-9941