On 05/16/2012 06:55 PM, Benedikt Bauer wrote: > And here goes the VPN config, again cleaned from PSK and Public IP of > the gateway. > > s:client-auto-mode:pull > What kind of gateway is at the other end? Maybe you need to use a different Auto Configuration mode (e.g ike config push instead of ike config pull)?