On Tue, 7 Sep 2010, Willie Gillespie wrote: > Not sure if it will make a difference, but I have an "ipsec saref = yes" in my xl2tpd.conf file. That helps xl2tpd to work with NATted IPsec clients if I remember correctly. You MUST use an saref patched kernel if setting that option, or else all your packets will fail. Paul