Hi Guys, im about to pull my hair out over this one... Heres the setup: 2 sites, each having an internode adsl connection and its own server. Both running routing and remote access. Site 1 Local IP Range: 10.1.1.0/255.255.255.0 Site 2 Local IP Range: 10.2.2.0/255.255.255.0 I have the Demand Dial connection set up to connect to the internet over PPPoE which works fine. On either end i have set up a Demand Dial connection to vpn to the opposite end (using a dyndns account which gives me the current ip address of the other server which gets updated every time it changes) - ie: im using the internet ip address to connect to the vpn. On the site 1 server I have a Static route pointing 10.2.2.0 to the vpn connection to site 2. On the site 2 server i have a static route pointing 10.1.1.0 to the vpn connection to site 1. Both sites i have the vpn connection in the NAT config as an 'internet/external' connection If i connect site 1 to site 2, i can access site 2 from any computer over the vpn. If i connect site 2 to site 1, i can do the reverse... BUT and here's a big but!... ONLY ONE AT A TIME. Once site 1 is connected to site 2, site 2 wont connect to site 1 and vice versa. When this is happening i can still ping the internet ip's both ways whilst one side is connected to the other (so its not like it cant find it or anything) I have tried connecting say site 1 to site 2, looking at what ip site 2 gave site 1 (local address, in this case 10.2.2.65), and then creating a vpn to that ip, and it worked. (but this ip can change on reconnect as its dhcp leased to that vpn port and since this isnt the only thing that will connect to vpn, chances are i wont always get the same port) I have had this working the other day but i had to format the server at site 2 as the hard drive failed and the set up was dodgy in the first place... and now i cant get the @#(*@&# thing to work!. Any ideas? Thanks Matt