On Thu, 5 Nov 2009, Ronald wrote: > Many thanks for your help, this is the config on the cisco side. can you take a look at this and suggest > the proper > ike and esp line on my side? > > with this config my configuration is > ike = aes_sha1 > esp = aes_sha1 It should be ike=aes-sha1 and esp=aes-sha1 Paul