On Wed, Mar 10, 2010 at 02:02:08PM -0500, Paul Wouters wrote: > don't forget "ip xfrm state". Useful. That looks to confirm that the ends of the tunnel are in place. So I'd guess it's the policy aspect that I need to learn how to debug. Whit