On Tue, 14 Sep 2010, Troy Telford wrote: > in my ipsec.conf: > > I had: > rightprotoport=17/1701 > > I needed: > rightprotoport=17/0 You should probably actually have 17/%any Paul