There are problems with TSO and TUN/TAP devices messing up VPN packets. Still want WiFi users to be segregated and already have vyatta mostly setup to do so. Would like to add RADIUS or TACACS+ mutually authenticated certificate based DHCP. Anybody have some pointers or a good howto?