I set up a BM VPN server behind a gateway/router. I can't get
autheticated.

This is the ikelog on the client using ther BM VPN client.

-----
11-02-2004 01:01:47 PM ***Receive Main Mode message from <VPN public
address>

11-02-2004 01:01:47 PM I-COOKIE=201d1343,R-
COOKIE=3c4bfd39,MsgID=0,1stPL=SA-PAYLOAD,state=0

11-02-2004 01:01:47 PM ERR :first message and responder cookie is not
zero
-----

On the server this is what I found in the VPN Audit log:

----
11/02/2004 01:01:44 PM IKE IKE SA NEGOTIATION - Peer lifetime is:
28800 My lifetime is: 28800

11/02/2004 01:01:44 PM IKE IKE SA NEGOTIATION - Peer lifetime is:
28800 My lifetime is: 28800

11/02/2004 01:01:44 PM IKENegotiating for an NMAS user <Client public
address>