wow, you let SDM setup your ACL's didn't you. i'll bet you can reduce what SDM did to about five lines. it did that to me when i set it up too. as for your VPN issue, i've never had much luck with the EZvpn connections, they always seem flakey. do you have the option of a webvpn (SSLVPN)...