On Tue, 30 May 2017, Craig Marker wrote: > Is there any other (set of) command(s) you would recommend I test to see if they accomplish what I need? You can try re-adding the conn, eg: ipsec auto --replace connname But that might not help either then? Paul