Agent Smith wrote: > care to post your ipsec.conf Marco? ahh very simple: conn rw right=%any audo=add pfs=yes compress=yes leftcert=blablabla.pem leftupdown=blablabla rightsubnet=vhost:%no,%priv