I am trying to setup a plain vanilla VPN 6.5/3.8 BM server with 2 Nics. . .
one internal and one external.

Should the external interface be primary? If so. . . all of the management
stuff and certs get setup on the external interface. If I choose internal,
then I have trouble setting up the cert on the external interface for
VPN.

Any ideas?