On Wed, 15 Sep 2004, Dave Harrison wrote: > But ipsec keeps failing when its time to add the route for the SA. > (route-client command exited with status 7) -- this message is > apparently to do with the next hop being incorrect ? Add a right or leftnexthop= setting pointing to the gateway of that machine/interface. Paul