OMG never mind; I'm an idiot and didn't see the entire config. On Fri, Jan 25, 2013 at 8:49 AM, Alex Pressé <alex.presse at gmail.com> wrote: > I don't think the acl VPNNETZE matches what you want it to match. > -- Alex Presse "How much net work could a network work if a network could net work?"