[Apologies for top post] There are a few problems with the config (once you get basic comms up you'll need to look at your IPsec settings) but I suspect the main problem is that interface at-1/0/0.0 isn't assigned to a security zone (untrust). Cheers, Dale On Aug 28, 2012 8:10 PM, "Josh Farrelly" <josh at base-2.co.nz> wrote: