Hi,
I'd like to make a VPN Concentrator using openbsd. I want users to be  
able to authenticate using usernames and passwords and to either nat  
the users or give them an ip from our main dhcp server via a bridge.

If I have say a mac user at home wanting to connect into my network  
using the built in mac os client how should I set up the vpn server?  
Will it auth using usernames and passwords or is certificates only  
simple way to authenticate to the vpn server?

How would I know which is better to use for this application out of   
PPTP or IPsec?

Any and all input welcome.

Khalid