first sorry for posting german in this section. i know the fact about the openswan and the 2.6 kernel, but i think that isn't useful. is it possible without touching the kernel ( kernel modules are ok) bring the ipsec interface back in game ? is there a better solution then using Openswan ? i hardly need ipsec because of cisco router .... martin