A friend of mine highly recommended that I not tax my internal DHCP server for doing my VPN via ISA 2004, and that I instead install DHCP server on ISA 2004 giving VPN users a different IP range. I am looked at different tutorials, even Tom's book but am not quite sure how to tackle it. Andrew