Lelio Parisi wrote: > yes you were right thank you very much!! > But now I've the problem that the pcs of the openswan > subnet can't ping the pcs under the other site (is a > ciso pix)... the SA is established well but cant > access to the other subnet... > what can be the problem?? Post your /etc/ipsec.conf from each side. David