Hi Alex, > Thank you for your help and suggestions guys, got it working with > OpenSwan. Interesting. Would you care to share the config that enabled you to do this with OpenSwan? Because I'm pretty sure L2TP/IPsec with destination NAT (i.e. the responder behind a NAT) is currently not possible with strongSwan. Thanks, Tobias