After hours of troubleshooting i know that the reason for my problems with
VPN (based on NW 6.5 SP1A and BM 3.8 SP1A): Its an eDirectory sync
problem. There are two identical servers and both produce -625/-626 DSTRACE
errors. It seems to be the tcpip stack (domestic) from the bm cd (all other
NW6.5 SP1A servers without bm and ipsec tcpip are working).

Any ideas or tips how i can get this two servers in sync ? any help is welcome.