Dev, I've pushed 2.3.1dr2 out to the WWW/FTP site - it has fixes for the rekeying bugs, as well as support for the recently formalized NAT-T RFC's. Please test on non-production systems if you ran into the rekeying bugs with 2.3.0, or NAT-T rekeying bugs with any earlier version. Ken