<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2722" name=GENERATOR></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Tahoma">I had this working from a public address (same network as the right side) on the client before I added the nat_traversal and virtual_private lines. Once I added those two lines the public address on the client no longer worked. Also the client from behind a private address (dsl at home) did not work at that time either.<BR> <BR>?1. With nat-t on will it work from both public and private addresses?<BR> <BR>?2. What do you see wrong that the private at home did not work?<BR> <BR> <BR>config setup<BR> interfaces=%defaultroute<BR> nat_traversal=yes<BR> virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12<BR> <BR>conn %default<BR> keyingtries=0<BR> disablearrivalcheck=no<BR> pfs=yes<BR> authby=secret<BR> <BR>conn test<BR> type=tunnel<BR> left=0.0.0.0<BR> leftsubnet=192.168.2.58/32<BR> right=12.19.X.X<BR> rightnexthop=12.19.X.X<BR> rightsubnet=192.168.0.0/16<BR> auto=add<BR> </BODY></HTML>