Weird. This doesn't work at all for me in my VPN lab. I'll try to apply it to the simple Source->vpws->Sink case.