Yes, I've tried that with no luck either.

Regards,
Tony

> Since it is a test on your own switch you can use any real IP address
> on the WAN without any problems. Have you tried to do that?
>
> sai
>
> On Tue, 29 Mar 2005 00:17:57 -0800 (PST), Tony <m0n0wall at switchout dot com>
> wrote:
>> Hello,
>>
>> Following are my IPSEC configs for "Mobile Clients"
>>
>> Phase 1 proposal (Authentication)
>> ---------------------------------
>> Negotiation Mode = aggressive
>> My Identifier = My IP address
>> Encryption algorithm = SHA1
>> DH Key group = 2
>>
>> Phase 2 proposal (SA/Key Exchange)
>> ----------------------------------
>> Protocol = ESP
>> Encryption algorithms = 3DES
>> Hash algorithms = SHA1
>> PFS key group = 2
>>
>> 10.1.1.200 = latop connected to the same switch as m0n0wall's WAN
>> interface
>> 10.1.1.201 = m0n0wall's WAN interface
>>
>