I realized you meant the back end networks, not the public IP's. The l2tp client is coming from a 10.10.x.x network (not otherwise connected to the gateway in question) and the traffic from the site to site connection is coming from a 192.168.x.x network. Trevor