if someone could check and confirm my findings, please do so:

NW65SBS (NW65SP1,BM38 + any spack)
C2S configured as should and works if no filter is set up.

But with filtering set up very restrictivly (see attached filters, private
address, public since server is behind NAT done by
router) I get an error with authgw not loading:

NWPKIgetwrappedServerkey returned FFFFFB3
and IKE.NLM is not loaded, so AUTHGW won't load, VPN will not work.
(Like here:
http://support.novell.com/cgi-bin/se...?/10090459.htm .)

I don't know yet what is neccessary, strange is in
http://support.novell.com/cgi-bin/se...?/10088980.htm the
filters are much more restrictive (but there the server does the NAT, not
the router).