just compiling it does not break it but if you use it. for example kernel 2.6.11 ( no patches ) openswan 2.4.4 linux = 10.0.100.107 Crusoe xp machine = 172.25.173.2 run the command ip route add 172.25.173.0/24 dev eth0 via 10.0.100.104 table sometable verify the xp machine can talk to the linux box ipsec/l2tp connection from the xp box using certificates fails run ip tables flush table sometable route add -net 172.25.173.0 netmask 255.255.255.0 gw 10.0.100.104 ipsec/l2tp now works Symbol: IP_MULTIPLE_TABLES [=n] Prompt: IP: policy routing Defined at net/ipv4/Kconfig:56 Depends on: NET && IP_ADVANCED_ROUTER Location: -> Device Drivers -> Networking support -> Networking support (NET [=y]) -> Networking options -> TCP/IP networking (INET [=y]) -> IP: advanced router (IP_ADVANCED_ROUTER [=y]) - : send the line "unsubscribe linux-net" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html