SSH_AUTH_SOCK and -F `pwd`/.ssh/config seems useless (as in not strictly usefull to demostrate the current feature), I'm not sure if sudo should be there, maybe we need a spill saying that you should be root ? anyway this can be stripped down to: # ssh -f -v 0:0 root@xyz ifconfig tun0 10.0.50.1 pointopoint 10.0.50.2 ; # ifconfig tun0 10.0.50.2 pointopoint 10.0.50.1 Cheers, -- Niv Sardi