I have issues with connecting to the VPN, if I use a NAT'd address. I
could successfully connect if I have a public IP. If some had a
similar problem and resolutions please let me know. Here is the IKE Log


12-02-2003 11:25:43 AM 00000000 80a44be1
12-02-2003 11:25:43 AM Start IKE-SA 008a7060 -
Initiator,src=192.168.0.171,dst=128.164.75.225,Tot SA=1

12-02-2003 11:25:43 AM ***Send Main Mode message to 128.164.75.225

12-02-2003 11:25:43 AM
I-COOKIE=07ed8c43,R-COOKIE=00000000,MsgID=0,1stPL=SA-PAYLOAD,state=0

12-02-2003 11:25:43 AM ***Receive Main Mode message from
128.164.75.225

12-02-2003 11:25:43 AM
I-COOKIE=07ed8c43,R-COOKIE=ffd2769d,MsgID=0,1stPL=SA-PAYLOAD,state=0

12-02-2003 11:25:43 AM IKE SA NEGOTIATION: Peer lifetime = 28800 My
lifetime=28800

12-02-2003 11:25:43 AM ****DH private exponent size is 1016****
12-02-2003 11:25:43 AM ***Send Main Mode message to 128.164.75.225

12-02-2003 11:25:43 AM
I-COOKIE=07ed8c43,R-COOKIE=ffd2769d,MsgID=0,1stPL=KEY-PAYLOAD,state=1

12-02-2003 11:25:43 AM ***Receive Main Mode message from
128.164.75.225

12-02-2003 11:25:43 AM
I-COOKIE=07ed8c43,R-COOKIE=ffd2769d,MsgID=0,1stPL=KEY-PAYLOAD,state=0

12-02-2003 11:25:43 AM There is NAT in between server and client

12-02-2003 11:25:43 AM *Sending MM id payload Type 3 - subject
name :9 subject alternative name :2,3
12-02-2003 11:25:43 AM *protocol 0 portnum 0 length 23

12-02-2003 11:25:43 AM ***Send Main Mode message to 128.164.75.225

12-02-2003 11:25:43 AM
I-COOKIE=07ed8c43,R-COOKIE=ffd2769d,MsgID=0,1stPL=ID-PAYLOAD,state=2

12-02-2003 11:25:48 AM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 128.164.75.225
12-02-2003 11:25:55 AM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 128.164.75.225
12-02-2003 11:26:05 AM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 128.164.75.225
12-02-2003 11:26:20 AM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 128.164.75.225
12-02-2003 11:26:20 AM IKE-SA is deleted- packet retransmit exceeded
the limit, dst=128.164.75.225

12-02-2003 11:26:23 AM IKE-SA 8a7060 is
Deleted,I-COOKIE=07ed8c43,R-COOKIE=ffd2769d,dst=128.164.75.225

12-02-2003 11:26:23 AM State:2 Cond:4 TimerEvent:1
12-02-2003 11:26:23 AM lifetime :28800 sec Rekey Time :0 sec

12-02-2003 11:26:23 AM Created at :0 sec Remaining life time
:-10207 sec Current time 39007

12-02-2003 11:27:24 AM Time to send a keep-alive packet
12-02-2003 11:32:24 AM Time to send a keep-alive packet
12-02-2003 11:35:04 AM Exiting thread for SendKeepAlivePacketProcess