Hi folks,

i do get a proper connection over DSL, but when i try to connect via UMTS (vodafone) i cannot connect.

Here?s the ike.log (trying via UMTS):

IKE Debug Log start time :10.7.2009 11.28.34
10.7.2009 11.28.34 Read trusted root cert file SYS:/ETC/IKE/ROOTCERT/C2S001..DER
10.7.2009 11.28.34 Read trusted root cert file SYS:/ETC/IKE/ROOTCERT/SRV001..DER
10.7.2009 11.28.34 Read trusted root cert file SYS:/ETC/IKE/ROOTCERT/C2S001..DER
10.7.2009 11.28.34 Read trusted root cert file SYS:/ETC/IKE/ROOTCERT/SRV001..DER
10.7.2009 11.29.03 ***Receive Main Mode message from CLIENT_IP
10.7.2009 11.29.03 I-COOKIE=21A3BDBF6936929E,R-COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=-1870521552
10.7.2009 11.29.03 Start IKE-SA 8F62C1A0 - Responder,src=SERVER_WAN_IP,dst=CLIENT_IP,TotSA=1
10.7.2009 11.29.03 AUTH ALG IS 3
10.7.2009 11.29.03 Negotiating for an NMAS user CLIENT_IP
10.7.2009 11.29.03 IKE SA NEGOTIATION: Peer lifetime = 28800 My lifetime=28800
10.7.2009 11.29.03 ****DH private exponent size is 1016****
10.7.2009 11.29.03 Local server's interfaces : SERVER_LAN_IP
10.7.2009 11.29.03 Local server's interfaces : SERVER_WAN_IP
10.7.2009 11.29.03 Recieved Supported Vendor id Novell Border Manager VPN 4.0 client - Protected Net from CLIENT_IP
10.7.2009 11.29.03 Recieved Supported Vendor id draft-ietf-ipsec-nat-t-ike-03 from CLIENT_IP
10.7.2009 11.29.03 ***Send Main Mode message to CLIENT_IP
10.7.2009 11.29.03 I-COOKIE=21A3BDBF6936929E,R-COOKIE=89CDF69FA7A0EB76,MsgID=0,1stPL=SA-PAYLOAD,state=-1870521552
10.7.2009 11.29.04 ***Receive Main Mode message from CLIENT_IP
10.7.2009 11.29.04 I-COOKIE=21A3BDBF6936929E,R-COOKIE=89CDF69FA7A0EB76,MsgID=0,1stPL=KEY-PAYLOAD,state=-1870521500
10.7.2009 11.29.04 No NAT detected
10.7.2009 11.29.04 ****SKEYID***secret***
10.7.2009 11.29.04 1E321CB5 B1ABDFA2 388F8D4C 671D317E
10.7.2009 11.29.04 ECBA734C 1CD8B982 6C8EF538 29BF7011
10.7.2009 11.29.04 AEAFE6F1 F0B1FF48 E6F4B145 BABF0AA2
10.7.2009 11.29.04 13ADFBA2 94195007 F3EC222B 93AE7AA8
10.7.2009 11.29.04 6FB235A4 58A12163 04F92C99 AAEBE3D9
10.7.2009 11.29.04 61E3D774 6F2C5791 E3C7D08D 14159191
10.7.2009 11.29.04 5ADAB4C8 3CBD823E C32681AD D5FB0DA8
10.7.2009 11.29.04 A55AA77D 648D29EF 20991707 3DB2D731
10.7.2009 11.29.04 ***Send Main Mode message to CLIENT_IP
10.7.2009 11.29.04 I-COOKIE=21A3BDBF6936929E,R-COOKIE=89CDF69FA7A0EB76,MsgID=0,1stPL=KEY-PAYLOAD,state=-1870521500
10.7.2009 11.29.08 Retransmit timer expired :Peer lost our reply retransmitthe old packet to CLIENT_IP
10.7.2009 11.29.08 ***Send Main Mode message to CLIENT_IP
10.7.2009 11.29.08 I-COOKIE=21A3BDBF6936929E,R-COOKIE=89CDF69FA7A0EB76,MsgID=0,1stPL=KEY-PAYLOAD,state=-1870521500
10.7.2009 11.29.08 ***Receive Main Mode message from CLIENT_IP
10.7.2009 11.29.08 I-COOKIE=21A3BDBF6936929E,R-COOKIE=89CDF69FA7A0EB76,MsgID=0,1stPL=ID-PAYLOAD,state=-1870521488
10.7.2009 11.29.08 Recieved MM ID payload type 1 protocol 0 portnum 0 length 8
10.7.2009 11.29.08 *Received MM ID ID_IPV4_ADDR CLIENT_IP
10.7.2009 11.29.08 Recieved notify message type 24578 from CLIENT_IP
10.7.2009 11.29.08 Recieved INITIAL_CONTACT notify deleting all old SA's with CLIENT_IP address
10.7.2009 11.29.08 IKE : Nmas user check authentication and traffic rule
10.7.2009 11.29.08 Adding user :original address is CLIENT_IP
10.7.2009 11.29.08
Client 192.168.116.3 is added successfully
10.7.2009 11.29.08 *Sending MM id payload IPSEC_ID_IPV4_ADDR SERVER_WAN_IP
10.7.2009 11.29.08 *protocol 0 portnum 0 length 8
10.7.2009 11.29.08 ***Send Main Mode message to CLIENT_IP
10.7.2009 11.29.08 I-COOKIE=21A3BDBF6936929E,R-COOKIE=89CDF69FA7A0EB76,MsgID=0,1stPL=ID-PAYLOAD,state=-1870521488
10.7.2009 11.29.08 ***Receive Quick Mode message from CLIENT_IP
10.7.2009 11.29.08 I-COOKIE=21A3BDBF6936929E,R-COOKIE=89CDF69FA7A0EB76,MsgID=A434826E,1stPL=HASH-PAYLOAD,state=-1870521440
10.7.2009 11.29.08 Start IPSEC SA 820F8480 - Responder****totSA=1
10.7.2009 11.29.08 ****DH private exponent size is 1016****
10.7.2009 11.29.08 Final IKE (phase 1) SA lifetime is 28800 secs
10.7.2009 11.29.08 IKE-SA is created. rekey time = 27360 encr=5,hash=2,auth=1,lifesec=28800
10.7.2009 11.29.08 dst=CLIENT_IP,time=4339367
10.7.2009 11.29.08 Received (QM) proxy ID CLIENT_IP - 0.0.0.0 0.0.0.0
10.7.2009 11.29.08 Warn :Proposal mismatch Quick Mode : ESP - transform mismatch mine : esp 3des his : esp des dst : CLIENT_IP src : SERVER_WAN_IP cookies[his :mine] 89CDF69FA7A0EB76 : 21A3BDBF8F62C376
10.7.2009 11.29.08 IPSE SA NEGOTIATION: Peer lifetime = 7200 My lifetime=120
10.7.2009 11.29.08 Received (QM) proxy ID CLIENT_IP - 0.0.0.0 0.0.0.0
10.7.2009 11.29.08 Sending DH params in QM - PFS Configured or Requested by Peer
10.7.2009 11.29.08 *Sending proxy ID type 1 CLIENT_IP
10.7.2009 11.29.08 *Sending proxy ID type 4 0.0.0.0/0.0.0.0
10.7.2009 11.29.08 ConstructProtectedNet:No DNS Info
10.7.2009 11.29.08 VPN Requires NCF is set to NO.
10.7.2009 11.29.08 ***Send Quick Mode message to CLIENT_IP
10.7.2009 11.29.08 I-COOKIE=21A3BDBF6936929E,R-COOKIE=89CDF69FA7A0EB76,MsgID=A434826E,1stPL=HASH-PAYLOAD,state=-1870521440
10.7.2009 11.29.12 ***Receive Quick Mode message from CLIENT_IP
10.7.2009 11.29.12 I-COOKIE=21A3BDBF6936929E,R-COOKIE=89CDF69FA7A0EB76,MsgID=A434826E,1stPL=HASH-PAYLOAD,state=-1870521440
10.7.2009 11.29.12 Invalid payload length - HASH-PAYLOAD payload
10.7.2009 11.29.12 Processed HASH-PAYLOAD unsuccessful - Received the message in the wrong state. Lost our reply, dst=CLIENT_IP.
10.7.2009 11.29.12 ***Send Quick Mode message to CLIENT_IP
10.7.2009 11.29.12 I-COOKIE=21A3BDBF6936929E,R-COOKIE=89CDF69FA7A0EB76,MsgID=A434826E,1stPL=HASH-PAYLOAD,state=-1870521440
10.7.2009 11.29.13 ***Send Quick Mode message to CLIENT_IP
10.7.2009 11.29.13 I-COOKIE=21A3BDBF6936929E,R-COOKIE=89CDF69FA7A0EB76,MsgID=A434826E,1stPL=HASH-PAYLOAD,state=-1870521440
10.7.2009 11.29.19 ***Receive Quick Mode message from CLIENT_IP
10.7.2009 11.29.19 I-COOKIE=21A3BDBF6936929E,R-COOKIE=89CDF69FA7A0EB76,MsgID=A434826E,1stPL=HASH-PAYLOAD,state=-1870521440
10.7.2009 11.29.19 Invalid payload length - HASH-PAYLOAD payload
10.7.2009 11.29.19 Processed HASH-PAYLOAD unsuccessful - Received the message in the wrong state. Lost our reply, dst=CLIENT_IP.
10.7.2009 11.29.19 ***Send Quick Mode message to CLIENT_IP
10.7.2009 11.29.19 I-COOKIE=21A3BDBF6936929E,R-COOKIE=89CDF69FA7A0EB76,MsgID=A434826E,1stPL=HASH-PAYLOAD,state=-1870521440
10.7.2009 11.29.20 ***Send Quick Mode message to CLIENT_IP
10.7.2009 11.29.20 I-COOKIE=21A3BDBF6936929E,R-COOKIE=89CDF69FA7A0EB76,MsgID=A434826E,1stPL=HASH-PAYLOAD,state=-1870521440
10.7.2009 11.29.30 ***Send Quick Mode message to CLIENT_IP
10.7.2009 11.29.30 I-COOKIE=21A3BDBF6936929E,R-COOKIE=89CDF69FA7A0EB76,MsgID=A434826E,1stPL=HASH-PAYLOAD,state=-1870521440
10.7.2009 11.29.45 IKEQMTimeoutHandler: Packet retransmit exceeded the limit! the SA will be deleted
10.7.2009 11.29.49 The client 192.168.116.3 removed from vpninf


....maybe someone has a hint for me? Thanks in advance!

Andr