On Mon, 10 Dec 2007, kelvin wrote: > hello everyone: > how to get ipsec eroute working when i use netkey? o You don't. You use 'ip xfrm state' and 'ip xfrm policy'. Documentation on those commands is scarce. Paul