> Try clamping the MSS, Or temporarily set the local Ethernet MTU, on the > NAT client, to the same as on the VPN. You are a genius. Thank you so much! That fixed it. Set MTU to 1200 on all interfaces, and we're rocking now. I'm sending you a virtual beer :) -Mark