Quoting "Slav Pidgorny (GEUS)" <slav.pidgorny@anz.com>

(From Peter)

...

I am struggling to get IPSec access from a Windows 7 client.

There are few possibilities: 1) the certificate is missing from the computer store;

That was it. I had to import the key and certificate as a PKCS12 package and import as described here: http://wiki.gentoo.org/wiki/IPsec_L2TP_VPN_server#Windows:_Correctly_install... Well, I have a new error ("no suitable proposal found") .. will see. Yesterday I was right at the edge of a cliff. Today I made a big step forward;-) More steps to follow.. Thanks Peter