Hey Craig: Thanks for your help with that dh problem. Your
trick of creating a second identical authentication rule
worked. Once I got that far, the VPN server denied access,
so I checked the traffic rules at the client and it showed
only the deny all default rule. Again, I made a second
Allow rule and moved to to the top of the list and things
worked at that point.

However, I am still getting kicked off due to the vpn server
not responding. Unloading ipflt cured that so it must be
one of my filters. What filter is causing this??? Is there
a detailed list of filters somewhere. I had used a list for
the BM38 admin guide, but I did not think is was that well
layed out.