On 25.01.2013 18:15, Antonio Soares wrote: > Remove AH from the equation and it should work. For example, change your > Transform Set to this: > > crypto ipsec transform-set L2L esp-aes 256 esp-sha-hmac > > I'm not sure but maybe NAT-T doesn't work with AH. Tried, didn't change anything though ... Tnx, Garry