I guess it would help if I had the iked.conf mode set to 0600 instead of 0644 and if I had one side in active mode. (:>
Always the simplest things make you waste so much time and frustration... Not a request, but may be a small note in iked.conf for the stupid one like me that create the configuration file instead of moving it from examples and modifying it would be nice. The examples one have the right mode set, not a new one created that would be 644. I am still not sure how in hell I had the flow on one side before, so I will go back to 5.6 and see. Now just ignore all this noise from me. Crawling back under my rock!!!
