Hi,
I'm trying to set up a C2S connection for remote access from GPRS
network (notebook with mobile phone as GPRS modem).
I get no errors, but I unable to ping any internal private ip address.

From other "internet places" my C2S connection works fine.
I use BM38sp2, C2S works with certificates.

Mariusz Tkacz


ike.log

9-3-2004 10:28:55 am ***Receive Main Mode message from 213.158.197.34
9-3-2004 10:28:55 am
I-COOKIE=C701A743178CB3BF,R-COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=-1195343336
9-3-2004 10:28:55 am Start IKE-SA BE659040 -
Responder,src=157.25.137.18,dst=213.158.197.34,Tot SA=1
9-3-2004 10:28:55 am IKE SA NEGOTIATION: Peer lifetime = 28800 My
lifetime=28800
9-3-2004 10:28:55 am ****DH private exponent size is 1016****
9-3-2004 10:28:55 am Local server's interfaces : 192.168.0.1
9-3-2004 10:28:55 am Local server's interfaces : 157.25.137.18
9-3-2004 10:28:55 am Recieved Supported Vendor id Novell Border Manager
VPN 4.0 client - Protected Net from 213.158.197.34
9-3-2004 10:28:55 am Recieved Supported Vendor id
draft-ietf-ipsec-nat-t-ike-03 from 213.158.197.34
9-3-2004 10:28:55 am ***Send Main Mode message to 213.158.197.34
9-3-2004 10:28:55 am
I-COOKIE=C701A743178CB3BF,R-COOKIE=C6D45FE7AC847059,MsgID=0,1stPL=SA-PAYLOAD,state=-1195343336
9-3-2004 10:28:56 am ***Receive Main Mode message from 213.158.197.34
9-3-2004 10:28:56 am
I-COOKIE=C701A743178CB3BF,R-COOKIE=C6D45FE7AC847059,MsgID=0,1stPL=KEY-PAYLOAD,state=-1195343284
9-3-2004 10:28:56 am There is NAT in between server and client
9-3-2004 10:28:56 am info: sending certificate request payload is disabled
9-3-2004 10:28:56 am ***Send Main Mode message to 213.158.197.34
9-3-2004 10:28:56 am
I-COOKIE=C701A743178CB3BF,R-COOKIE=C6D45FE7AC847059,MsgID=0,1stPL=KEY-PAYLOAD,state=-1195343284
9-3-2004 10:28:58 am ***Receive Main Mode message from 213.158.197.34
9-3-2004 10:28:58 am
I-COOKIE=C701A743178CB3BF,R-COOKIE=C6D45FE7AC847059,MsgID=0,1stPL=ID-PAYLOAD,state=-1195343272
9-3-2004 10:28:58 am Recieved MM ID payload type 3 protocol 0 portnum 0
length 22
9-3-2004 10:28:58 am Recieved notify message type 24578 from 213.158.197.34
9-3-2004 10:28:58 am Adding user :original address is 213.158.197.34
9-3-2004 10:28:58 am Adding user :Nat inbetween Nat address is
213.158.197.34
9-3-2004 10:28:58 am Adding user :Nat address is 213.158.197.34
9-3-2004 10:28:58 am
Client 4.0.0.1 is added successfully
9-3-2004 10:28:58 am *Sending MM id payload Type 9 - subject name :9
subject alternative name :2,3
9-3-2004 10:28:58 am *protocol 0 portnum 0 length 44
9-3-2004 10:28:58 am ***Send Main Mode message to 213.158.197.34
9-3-2004 10:28:58 am
I-COOKIE=C701A743178CB3BF,R-COOKIE=C6D45FE7AC847059,MsgID=0,1stPL=ID-PAYLOAD,state=-1195343272
9-3-2004 10:29:00 am ***Receive Quick Mode message from 213.158.197.34
9-3-2004 10:29:00 am
I-COOKIE=C701A743178CB3BF,R-COOKIE=C6D45FE7AC847059,MsgID=746057F4,1stPL=HASH-PAYLOAD,state=-1195343224
9-3-2004 10:29:00 am Start IPSEC SA BA0684C0 - Responder****totSA=1
9-3-2004 10:29:00 am ****DH private exponent size is 1016****
9-3-2004 10:29:00 am Final IKE (phase 1) SA lifetime is 28800 secs
9-3-2004 10:29:00 am IKE-SA is created. rekey time = 27360
encr=5,hash=2,auth=3,lifesec=28800
9-3-2004 10:29:00 am dst=213.158.197.34,time=3060365
9-3-2004 10:29:00 am Received (QM) proxy ID 10.113.192.194 - 0.0.0.0
0.0.0.0
9-3-2004 10:29:00 am Warn :Proposal mismatch Quick Mode : ESP -
transform mismatch mine : esp 3des his : esp des dst :
213.158.197.34 src : 157.25.137.18 cookies[his :mine]
C6D45FE7AC847059 : C701A743BE659216
9-3-2004 10:29:00 am IPSE SA NEGOTIATION: Peer lifetime = 7200 My
lifetime=7200
9-3-2004 10:29:00 am Received (QM) proxy ID 10.113.192.194 - 0.0.0.0
0.0.0.0
9-3-2004 10:29:00 am Sending DH params in QM - PFS Configured or
Requested by Peer
9-3-2004 10:29:00 am *Sending proxy ID type 1 10.113.192.194
9-3-2004 10:29:00 am *Sending proxy ID type 4 0.0.0.0/0.0.0.0
9-3-2004 10:29:00 am VPN Requires NCF is set to NO.
9-3-2004 10:29:00 am ***Send Quick Mode message to 213.158.197.34
9-3-2004 10:29:00 am
I-COOKIE=C701A743178CB3BF,R-COOKIE=C6D45FE7AC847059,MsgID=746057F4,1stPL=HASH-PAYLOAD,state=-1195343224
9-3-2004 10:29:01 am ***Receive Quick Mode message from 213.158.197.34
9-3-2004 10:29:01 am
I-COOKIE=C701A743178CB3BF,R-COOKIE=C6D45FE7AC847059,MsgID=746057F4,1stPL=HASH-PAYLOAD,state=-1195343224
9-3-2004 10:29:01 am ESP-SA is created:algorID=esp
3des,mySPI=5B6C16C9,peerSPI=0ED3078A,time=170021 ,dst=213.158.197.34
9-3-2004 10:32:11 am ***Receive Acknowledge Informational message from
213.158.197.34
9-3-2004 10:32:11 am
I-COOKIE=C701A743178CB3BF,R-COOKIE=C6D45FE7AC847059,MsgID=28F90EED,1stPL=HASH-PAYLOAD,state=-1195343224
9-3-2004 10:32:11 am recieved isakmp sa delete msg from 213.158.197.34
cookies are C701A743178CB3BF : C6D45FE7AC847059
9-3-2004 10:32:11 am ***Send Acknowledge Informational message to
213.158.197.34
9-3-2004 10:32:11 am
I-COOKIE=C701A743178CB3BF,R-COOKIE=C6D45FE7AC847059,MsgID=28F90EED,1stPL=HASH-PAYLOAD,state=-1195343224
9-3-2004 10:32:12 am IKE-SA BE659040 is
Deleted,I-COOKIE=C701A743,R-COOKIE=C6D45FE7,dst=213.158.197.34
9-3-2004 10:32:12 am State:3 Cond:4 TimerEvent:3
9-3-2004 10:32:12 am lifetime :28800 sec Rekey Time :27360 sec
9-3-2004 10:32:12 am Created at :170020 sec Remaining life time
:28606 sec Current time 170214
9-3-2004 10:32:12 am ESP-SA is deleted :algorID=esp
3des,mySPI=5B6C16C9,peerSPI=0ED3078A,time=170214,d st=213.158.197.34
9-3-2004 10:32:12 am The client 4.0.0.1 removed from vpninf