Hi Dragomir, > But when I do: > user at vpn-server:/etc/ppp# ipsec down "L2TP"[2] > 021 no connection named "L2TP[2]" The old IKEv1 daemon pluto does not support this syntax. That is, you can't tear down individual instances of a config. If you want that you have to upgrade to 5.0.x (or use a separate config for each client). Regards, Tobias