> Is it ok for the source port for IKE to be something other than > port 500? > > Hopefully it is ok, as this eases ipsec across NAT boxes Whoa! Cognitive dissonance!