On Thu, 1 Apr 2004, Stephen Wong wrote: > conn rwarrior > leftsubnet=10.0.0.0/8 > auto=add > pfs=yes I dont think you mean to say that the roadwarrior has the entire 10/8 space behind it. I also didn't see any virtual_private line or a subnetwithin statement anywhere. Read the X.509 documentation on how to configure one of those. Paul