Hi John We have a working suse 9.1 config so I thought my info might be useful. See below Jan 21 09:45:54 asf-engine pluto[31977]: including NAT-Traversal patch (Versio n 0.6c) [disabled] Do you have nat_traversal=yes in the config section of ipsec.conf Colin Johnston