> I don't want pure IPSEC. I want L2tp over IPSEC Then check the examples in /etc/ipsec.d/examples/l2tp-*.conf and do not install any software on the Windows machines at all, except maybe "certimport.exe" when using X.509 and not wanting to do 20 mouse clicks to import the certificates properly. Paul