On Behalf Of Binand wrote: >You could merge the two "conn" entries into one, and have >rightsubnets="172.16.100.0/24 192.168.212.0/24". if I use: rightsubnets="172.16.100.0/24 192.168.212.0/24" I can not establish the tunnel to the network 172.16.100.0 and even with 192.168.212.0 network. - Salvatore.