Support for mobile users Add a flow on the server to the ipsec.conf: ike dynamic esp from any to any main auth hmac-sha1 enc aes quick auth hmac-sha1 enc aes psk "secretkey" Add a flow on the client as well: ike esp from any to any peer 10.1.1.1 main auth hmac-sha1 enc aes quick auth hmac-sha1 enc aes psk "secretkey" Voila!