> If a set uniqueids=yes, can this be handled correctly in the previously > described scenario ? The uniqueids= check uses IKE identities. Two different Win7 clients (behind NAT) use different IKE identities, the SAs are therefore different. Regards Martin