just worked

Thanks for the guide – very clear and simple to setup.
Since we’re using unauthenticated system (lock down to IP addr), we simply deleted the -xn and -xp parameters which worked fine.

We also had to replace the ‘n’ and ‘nn’ bits with n, as the site appears to of striped that out when you pasted it.