Automatically configure IPSec tunnels on win2k
Here is info on how to automatically after dialup. You would need this if you have a dynamic IP and wish to connect to a subnet behind a gateway.