First thank you very much for your time and reply. I appreciate. Therefore win7 is a road warrior host so dynamic address. so the iked.conf become :
ikev2 "win7" passive esp \ from 192.168.0.0/24 to 10.10.10.0/24 local aa.bb.cc.dd peer any \ srcid aa.bb.cc.dd \ config address 10.10.10.7 ILLUSTRATION : 192.168.0.0/24--lan--GW51--egress--INTERNET--(win7) GW51 : hostname vpn.X.net IP address : 192.168.0.51 (lan) egress : aa.bb.cc.dd static IP ADDRESS provide by ISP (SDSL) win7 : hostname win7 IP ADDRESS DHCP (192.168.1.77) IKEV2 Connection config : 10.10.10.7/24 Does this config sound good for you ? Cheers, Wesley.