I just made it much simpler. I stripped off all connections except the destination, and renamed it generically to 'destination' then instructed the ops to modify it in the ui. it works but it seems that the pw needs to be manually entered each time and it doesn't display. This works.