so, we currently have a wireless network in the house. At the moment the AP is located in the interior network, and is not firewalled off. We are running WEP to at least stop the most casual of attackers, but obviously that's not enough. We have an unused NIC in our firewall (NetBSD+ipfilters) that we're eventually planning to put the AP on it, but then we would like to run some VPN over it so we can authenticate onto the interior network. Does anyone have experience setting such a thing up and can offer pointers/ideas/recommendations?

We are planning to set up a public access point as well, but we'd like to keep this one private.

thanks.

-mike