>Aha. Everything for localnet now goes to eth0, never to vpn. You have to >make sure your routing table sends those packets to the vpn interface >that should go to the other side. Sure! #route add -host 192.168.0.130 dev vpn Pings go both sides now :) Thank you for help! Regards -- David Chkhikvadze davidck at gsc.gov.ge