And forgot to mention, that you can establish tunnel to remote site, with dynamic IP address using aggressive mode. You will not need dyndns for this. Regards, Misha