we still face some C2S Problems on a BM38SP4 box, running NW6.5 SP4.
Some clienst have trouble to connect via a NAT Router, if these clients
connect through ISDN (Modem), it works perfect.

After launching the VPN client, it shows after 5 min:
"The IKE application did not response to the start command. The time
limit exceeded."
Paket-Traces did show that in case of using Dynamic NAT routers at the
client side, that the server did not respond at a specific time. When
running BMSP3, the messages have been different, like "Error receiving
public DH-Servervalue" and "Connection was disconnected by the
Authentication gateway".

Any ideas how to trace that down would be appreciated.

Jürgen Blessing