TDBs are also known as SAs. Looking at the commands, you seem to have a "disconnect" in the SAs created. In all the commands, make sure you have either "-dst a.115.230.160 -spi 1000" or "-dst a.115.242.23 -spi 1001"; your problem is that you mix-match these randomly --- I suggest you read the ipsec.4 manpage carefully. -Angelos