You are totally right. We have several providers here in the Netherlands and I was trying this with exactly the one which doesn'r work (Vodafone). With exactly the same windows mobile with exactly the same config but on a different provider I had no ...

I was wondering if you did succedd in getting this working. RegardsLuc

Thank you very much for the info.To answer your question why only the default RA group is working:Since the lt2p/ipsec client doesn't specify a group name the default values of the default RA group will be used. This is the reason why you have to use...

Line 2 of access-list inside masks all other lines. You need to put what you now have on line 2 after you have issued all your deny statements.