Hello all!!! First post here Some carrier, somewhere between us and the service provider is selectively dropping the IKE packets originating from our VPN gateway and destined for our Brazil gateway. Other traffic is able to pass, as are the IKE packets coming back from Brazil to us. This is effectively preventing us from establishing the IPSEC tunnel between our gateways. Also something else is awry, for two given hosts on the same subnet (x.y.z.52 and x.y.z.53), they take two wildly divergent paths: For dest x.y.x.52 16 ms 3 ms 3 ms xe-2-3-0.cr1.lga5.us.above.net [64.125.31.34] 2 ms 2 ms 2 ms xe-0-1-0.er1.lga5.us.above.net [64.125.27.61] 12 ms 3 ms 13 ms e2-4-10000m.ar9.nyc1.gblx.net [208.178.58.197] 117 ms 118 ms 118 ms te3-4-10g.asr1.gru1.gblx.net [67.16.142.238] 136 ms 137 ms 136 ms ctbc-multimidia-data-net-s-a.gigabitethernet1-2.ar5.gru1.gblx.net [207.138.94.102] 157 ms 136 ms 138 ms xe-3-2-0-0.core-b.ula001.ctbc.com.br [201.48.44.165] 132 ms 132 ms 141 ms ge-3-0-0-0.core-b.spo511.ctbc.com.br [201.48.44.14] 135 ms 133 ms 134 ms ae1-0.edge-a.spo511.ctbc.com.br [201.48.44.93] For dest x.y.x.53 3 ms 2 ms 3 ms xe-2-3-0.cr1.lga5.us.above.net [64.125.31.34] 2 ms 2 ms 2 ms xe-1-1-0.er1.lga5.us.above.net [64.125.26.162] 19 ms 3 ms 12 ms e2-4-10000m.ar9.nyc1.gblx.net [208.178.58.197] 117 ms 117 ms 117 ms te3-4-10g.asr1.gru1.gblx.net [67.16.142.238] 117 ms 117 ms 118 ms 64.209.106.170 118 ms 118 ms 118 ms ae1-0.edge-a.spo511.ctbc.com.br [201.48.44.93] Anyone have any insight on to what may be occurring? Sent from my iPhone