Thanks for the wise words Stuart.....makes sense now !
> Stuart Henderson wrote : >you can only have one "peer any" configured. therefore if you >want to have users connecting from unknown addresses, they must >either use the same psk, or use keys instead.