Basic configuration, ACLs and NAT is done. Tomorrow I need to figure out VPN configuration with Radius auth.