> It looks like your Pocket PC is behind NAT. As far as I know this works, as > long as the Openswan router is using NETKEY and not KLIPS. Are you using > nat_traversal=yes in ipsec.conf? No, it's switched off. > If you switch to certificates it should also work for KLIPS. I will try certificates next. Thanks Andreas