Hello Noth,
"Try pppx instead of pppx0, it'll work in pf.conf, including as a macro." I did!! I found another article that talked about the group. After reading this: http://frankgroeneveld.nl/2015/08/16/configuring-l2tp-over-ipsec-on-openbsd-for-mac-os-x-clients/ However, I still get this error if I try to reload the firewall and no vpn client is established (thus the pppx group or pppx0 interface doesn't exist yet)... this is the same if I use pppx or pppx0 no IP address found for pppx:network /etc/pf.conf:102: could not parse host specification no IP address found for pppx:network /etc/pf.conf:103: could not parse host specification no IP address found for pppx:network /etc/pf.conf:106: could not parse host specification If I remove :network, the same errors: no IP address found for pppx /etc/pf.conf:102: could not parse host specification no IP address found for pppx /etc/pf.conf:103: could not parse host specification no IP address found for pppx /etc/pf.conf:106: could not parse host specification However, if I comment out those lines, connect, then uncomment out the lines, things work as they should (it appears) It also seems as if I can't connect if I have those lines uncommented after a reboot. Many strange things. Thanks for the help everyone, I'm going to continue to research.