Hi, If a remote user used manual key, there will be no IKE neogotication to negociate NAT-Traversal. How does NAT Traversal work? Just enable UDP Encapsulation (not NAT-Traversal, since there is no IKE) in both client and server? Michael