Similar issue here i think. I got an issue that the CCR1036 with ROS6.1 ist NATing incoming ipsec connections to in-interface IP 09:18:16 firewall,info VPN forward: in:ether6 out:Ring, src-mac 00:26:0b:28:77:c0, proto 50, IPSEC_SRC->IPSEC_DST, NAT (IPSEC_SRC->ETHER6_PUBLIC_IP)->IPSEC_DST, len 112 I ...