Hi George, Is somebody looking at ipsec-tools? As far as I can see it requires a lot of kame definitions, although not used most of the times. I have tried to make sense of this, but it wasn't easy. Peter