On Tuesday, January 22, 2013 12:59:12 AM Willie Gillespie wrote: > Not 100% sure, but I've never had to add a route using NETKEY. Doesn't the act of defining which IP addrs are 'beyond' each end of the IPSEC tunnel determine which packets must go through the tunnel and which packets cannot? N