> Any command to drop a xauth user's connection? No, there is currently no direct command to terminate a connection with a (XAuth) user id. You'll have to look up the connection manually with "ipsec status", and then terminate it with the unique IKE_SA identifier. Regards Martin