While connecting a VPN client I can see that it is trying to connect. After
a while the client reports:

VPN login:
An error was reported by the IKE application
Either xxx.xxx.xxx.xxx is an invalid VPN server address or the IKE is not
loaded on the VPN server. For more details please look at IKE log.

Other clients are working fine so it's not a server problem. When I look at
the Bordermanager activity log I can see the following:

08/10/2007 03:11:56 PM AUTH Gateway Connection closed for the VPN client at
address 80.126.177.252.
08/10/2007 03:11:56 PM AUTH Gateway VPN client NMAS user
emergo.USR.010.LICOM at address 80.126.177.252 has been authenticated.
08/10/2007 03:11:56 PM VPN Control Client emergo.USR.010.LICOM reconnected
to IPSEC.
08/10/2007 03:11:56 PM AUTH Gateway Process NMAS request: NMAS
authentication successful.
08/10/2007 03:11:54 PM AUTH Gateway A connection was opened for a VPN client
at address 80.126.177.252.

Normally after this the IKE phase begins, like this:
08/10/2007 09:48:58 AM IKE Nmas user check authentication and traffic
rule
08/10/2007 09:48:58 AM IKE Received notify message of type IPSEC_CONTACT
: 24578 from 86.95.26.205
08/10/2007 09:48:58 AM IKE Received MM ID type: 1 protocol : 0 portnum: 0
length 8
08/10/2007 09:48:58 AM IKE ** Nat detected
08/10/2007 09:48:58 AM IKE IKE SA NEGOTIATION - Peer lifetime is: 172800
My lifetime is: 28800
08/10/2007 09:48:58 AM IKE Negotiating for an NMAS user 86.95.26.205

But with this particular client this never happens. When i look at the ike
log on the vpn client it shows something like this:

08-10-2007 02:04:11 PM Start IKE-SA 013d71d8 -
Initiator,src=192.168.2.111,dst=193.203.221.137,To tSA=1

08-10-2007 02:04:11 PM AUTH ALG IS 1
08-10-2007 02:04:11 PM Negotiating for an NMAS user 193.203.221.137

08-10-2007 02:04:11 PM ***Send Main Mode message to 193.203.221.137

08-10-2007 02:04:11 PM
I-COOKIE=3188086bb5297116,R-COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD
,state=18021124

08-10-2007 02:04:16 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 193.203.221.137
08-10-2007 02:04:16 PM ***Send Main Mode message to 193.203.221.137

08-10-2007 02:04:16 PM
I-COOKIE=3188086bb5297116,R-COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD
,state=13826840

08-10-2007 02:04:23 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 193.203.221.137
08-10-2007 02:04:23 PM ***Send Main Mode message to 193.203.221.137

08-10-2007 02:04:23 PM
I-COOKIE=3188086bb5297116,R-COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD
,state=13826840

08-10-2007 02:04:33 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 193.203.221.137
08-10-2007 02:04:33 PM ***Send Main Mode message to 193.203.221.137

08-10-2007 02:04:33 PM
I-COOKIE=3188086bb5297116,R-COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD
,state=13826840

08-10-2007 02:04:48 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 193.203.221.137
08-10-2007 02:04:48 PM IKE-SA is deleted- packet retransmit exceeded the
limit, dst=193.203.221.137

08-10-2007 02:04:48 PM Stoppping ike retransmit timer
08-10-2007 02:04:51 PM IKE-SA 13d71d8 is
Deleted,I-COOKIE=3188086b,R-COOKIE=00000000,dst=193.203.221.137

08-10-2007 02:04:51 PM State:0 Cond:4 TimerEvent:1
08-10-2007 02:04:51 PM lifetime :0 sec Rekey Time :0 sec

08-10-2007 02:04:51 PM Created at :0 sec Remaining life time :-9552141
sec Current time 9552141

08-10-2007 02:04:51 PM Freeing IKE SA
08-10-2007 02:04:57 PM Exiting thread for SendKeepAlivePacketProcess


Any idea's where to start troubleshooting ?

Regards,

Hen