Tested this from 64.142.21.55 on the same switch as 64.142.21.254, and I see tons of l2tp traffic being passed through ipsec0. I remember reading something about a 2.5 branch somewhere related to nat, should I be testing out something from that instead of 2.4.5? Trevor