On Thu, 9 Jan 2003, Cressatti, Dominique wrote: > Can you expand? because I tried the following: > ============= > # Peer section > section peer > peer 195.157.58.113
> So given that I have "strict-ip-check 0", I would think that > if am coming from 195.157.58.114 it would still work. Nope, because the source IP address is used to look up the secret and other parameters. The "strict-ip-check 0" simply allows the IP address to change *after* the tunnel has been established -- apparently, some systems send subsequent packets from a different IP address than the original packet. Regards, David.
