"Peter McGill" wrote: > try setting, your esp= setting to match the ike= setting or these ciphers. > ie) esp=3des-md5 or esp=3des-md5-modp1536 (use setting from your > conf/log.) ..with: esp=3des-md5 ..the problem is solved. thanks again. ------ Salvatore.