Just wanted to let you know that I got the tunnel working after telling the Cisco guys to set DH group 2 and after setting nat-t on my openswan box. Thanks again. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com