remote box outside interface: 63.147.76.30, inside interface 192.168.241.15 remote network: #ike esp from 192.168.0.0/16 to 10.50.3.0/24 peer 71.196.227.124 #ike esp from 63.147.76.30 to 10.50.3.0/24 peer 71.196.227.124 #ike esp from 63.147.76.30 to 71.196.227.124 Maybe try this? ike esp from 192.168.0.0/16 to 10.50.3.0/24 peer 71.196.227.194 ike esp from 63.147.76.30 to 10.50.3.0/24 peer 71.196.227.194 ike esp from 63.147.76.30 to 71.196.227.194 home box outside interface 71.192.227.194 inside interface 10.50.3.1 home network: ike passive esp from 10.50.3.0/24 to 192.168.0.0/16 peer 63.147.76.30 ike passive esp from 71.192.227.194 to 192.168.0.0/16 peer 63.147.76.30 ike passive esp from 71.196.227.194 to 63.147.76.30