On 06/06/2017 4:14 PM, Noel Kuntze wrote: > Did you also DNAT the ESP traffic, if you somehow don't use UDPENCAP, as you should with NAT? We did add a rule for that, but that's not saying we did it right. As for UDPENCAP, I can't say for certain, but I'll dig on that vis-a-vis Windows RRAS. Tom