ICA Thin Client w/IPSEC VPN

From: aardvark (aardvark_three_at_yahoo.com)
Date: 07/30/03 

Date: 29 Jul 2003 20:12:26 -0700

Hello

I've been looking for an answer to this for awhile but can't find
anything. I'm interested in any advice or tips that anyone can give.

I'm rolling out old PCs to home users with always-on broadband
internet connections for use as thin clients. I have a Citrix XPa farm
for them to connect to. I also have a public IPSEC VPN endpoint that
they can establish a VPN to. I'd like to provide my users with a PC
that they just plug in and turn on, and the computer then

1) Gets an IP address from their ISP.
2) Establishes a VPN connection with my VPN endpoint
3) Launches the ICA client
4) Connects to the ICA farm and presents them with a login screen.

I'm thinking that I could use a CD-based Linux distro with FreeS/WAN
and the Citrix-provided ICA client and some scripting to do this. I 'd
like to know if anyone

a) Has a better idea;
b) Has done this before; or
c) Has any suggestions for me as to which distribution I should use,
how I can configure FreeS/WAN and the ICA client, and how I can
somehow script this series of events.

I've checked out PXES, but it seems more oriented to TFTP
distribution. I've also found Slackware Live. None of these seem to be
the real definitive CD-based Linux distro. Can anyone suggest any
others?

thanks

a3