When you establish an esp tunnel, the subnets on the remote end of the tunnel do not seem to appear in either "netstat -nr" or 'route get xxx.xxx.xxx.xxx' Is there a way to display those routes other than using setkey to dump the SPD's? Thanks for your time.