On Mon, May 24, 2004 at 08:40:03PM -0600, Paul wrote: > I may be wrong, but I would think that would work fine. Each > user would have the same source IP address, but different > source ports (>1024) via NAT. Anyone else know? IPSEC headers do not have the concept of a port, so it cannot be translated. -Vince