I guess i got it work !!! I think the problem was in win box itself. At first I used the ipsec.exe and I needed to install the win xp support tools (ipseccmd.exe), so I had the ipsec, the ipseccmd etc. so I clean-installed xp, sp2 and lspisectool and it worked right out of the box! thanks for your help henro