3 years later, and Panther supports IPSec!
AH, but here's MY question: any OS X Server gurus here know how to configure VPN and Firewall so that ONLY VPN users can access sharepoints on the server?
So far: if I open the firewall for AFP, then *anyone* can connect, with or without VPN. If I close it for AFP, nobody can connect, with or without VPN. Not good.
It doesn't even work to open the firewall JUST for the address range of the VPN service - which really baffles me. I was SURE that would to it. But no.