Hi, > Thanks my site-enabled/inner-tunnel contains default server inner-tunnel, > I dont have auth-all file. of course you dont - its not provided by default...its somethign that someone else has ..and if you ONLY have a inner-tunnel virtual server present then I'm surprised anything works alan