Chinna, Go back an reread the last few messages I have sent describing the difference between what native IPsec does vs. what any standard says about L2TP over IPsec re access control. That is the basis for my comments and those of Andrew. Steve