On Mon, 8 Mar 2010, Peter Rathlev wrote: > crypto isakmp profile Crypto-Profile-TEST > vrf INSIDE-VRF > keyring Crypto-Keyring-TEST > match identity address 172.16.0.1 255.255.255.255 OUTSIDE-VRF > initiate mode aggressive > ! not sure, but maybe you should put this profile in vrf OUTSIDE-VRF ? Regards, John