crypto ip-sec df-bit clear/set ? If you have mismatches on either ends you can see "unencrypted" traffic on one end while normal signs of operation on the other. Warm Regards, Mario A. Spinthiras http://www.spinthiras.net/