Hi,

I am having problems establishing client to site connections. The following
is the ike log. Any help would be appreciated.

10-23-2006 08:45:22 PM Created thread for SendKeepAlivePacketProcess
10-23-2006 08:45:22 PM Start IPSEC SA 00a26170 - Initiator****totSA=1

10-23-2006 08:45:22 PM src from IPsec

10-23-2006 08:45:22 PM 00000000 ac1b83d3
10-23-2006 08:45:22 PM dst from IPsec

10-23-2006 08:45:22 PM 00000000 c40ddc14
10-23-2006 08:45:22 PM Start IKE-SA 00a29100 -
Initiator,src=172.27.131.211,dst=196.13.220.20,Tot SA=1

10-23-2006 08:45:22 PM AUTH ALG IS 1
10-23-2006 08:45:22 PM Negotiating for an NMAS user 196.13.220.20

10-23-2006 08:45:22 PM ***Send Main Mode message to 196.13.220.20

10-23-2006 08:45:22 PM
I-COOKIE=852fbd906d76550b,R-COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD
,state=18086660

10-23-2006 08:45:22 PM ERROR :packet length 25600 recieved is too high ,
probably bogus packet

10-23-2006 08:45:22 PM ERROR :Maximum size of allowed packet is 25600

10-23-2006 08:45:22 PM ***Receive Main Mode message from 196.13.220.20

10-23-2006 08:45:22 PM
I-COOKIE=852fbd906d76550b,R-COOKIE=169f29874492ae65,MsgID=0,1stPL=SA-PAYLOAD
,state=17038036

10-23-2006 08:45:22 PM IKE SA NEGOTIATION: Peer lifetime = 28800 My
lifetime=28800

10-23-2006 08:45:22 PM ****DH private exponent size is 1016****
10-23-2006 08:45:22 PM Recieved Supported Vendor id
draft-ietf-ipsec-nat-t-ike-03 from 196.13.220.20
10-23-2006 08:45:22 PM ***Send Main Mode message to 196.13.220.20

10-23-2006 08:45:22 PM
I-COOKIE=852fbd906d76550b,R-COOKIE=169f29874492ae65,MsgID=0,1stPL=KEY-PAYLOA
D,state=17037936

10-23-2006 08:45:23 PM ERROR :packet length 25600 recieved is too high ,
probably bogus packet

10-23-2006 08:45:23 PM ERROR :Maximum size of allowed packet is 25600

10-23-2006 08:45:23 PM ***Receive Main Mode message from 196.13.220.20

10-23-2006 08:45:23 PM
I-COOKIE=852fbd906d76550b,R-COOKIE=169f29874492ae65,MsgID=0,1stPL=KEY-PAYLOA
D,state=17038036

10-23-2006 08:45:23 PM There is NAT in between server and client

10-23-2006 08:45:23 PM ****SKEYID***secret***

10-23-2006 08:45:23 PM 5dbb1e30 e64f64db f0414169 bcb488c8

10-23-2006 08:45:23 PM dc0e6f40 4152581a 9ccfff8e 784399e5

10-23-2006 08:45:23 PM 4f396b59 7343d724 46fd7a0c 4338e464

10-23-2006 08:45:23 PM c3a138cc d519e74c ff9a6873 9475a137

10-23-2006 08:45:23 PM 29e2fb9c 4dc796ed 0db30a88 5eef2dbf

10-23-2006 08:45:23 PM 07221877 07dd92be 2c4fa75b 13fcbbc9

10-23-2006 08:45:23 PM 52b6ae48 e0a09796 dbee684c ede53dd8

10-23-2006 08:45:23 PM b3cfb8a9 5f2c654f edfe167f e730b08a

10-23-2006 08:45:23 PM *Sending MM id payload IPSEC_ID_IPV4_ADDR
172.27.131.211

10-23-2006 08:45:23 PM *protocol 0 portnum 0 length 8

10-23-2006 08:45:23 PM Sending INITIAL_CONTACT notify to 196.13.220.20
10-23-2006 08:45:23 PM ***Send Main Mode message to 196.13.220.20

10-23-2006 08:45:23 PM
I-COOKIE=852fbd906d76550b,R-COOKIE=169f29874492ae65,MsgID=0,1stPL=ID-PAYLOAD
,state=17037964

10-23-2006 08:45:25 PM ERROR :packet length 25600 recieved is too high ,
probably bogus packet

10-23-2006 08:45:25 PM ERROR :Maximum size of allowed packet is 25600

10-23-2006 08:45:25 PM ***Receive Main Mode message from 196.13.220.20

10-23-2006 08:45:25 PM
I-COOKIE=852fbd906d76550b,R-COOKIE=169f29874492ae65,MsgID=0,1stPL=ID-PAYLOAD
,state=17038036

10-23-2006 08:45:25 PM Recieved MM ID payload type 1 protocol 0 portnum 0
length 8

10-23-2006 08:45:25 PM *Received MM ID ID_IPV4_ADDR 196.13.220.20

10-23-2006 08:45:25 PM Final IKE (phase 1) SA lifetime is 28800 secs
10-23-2006 08:45:25 PM IKE-SA is created. rekey time = 21600
encr=5,hash=2,auth=1,lifesec=28800
10-23-2006 08:45:25 PM dst=196.13.220.20,time=5566750

10-23-2006 08:45:25 PM ****DH private exponent size is 1016****
10-23-2006 08:45:25 PM Rule id is NULL. So, not constructing the rule id
payload

10-23-2006 08:45:25 PM Sending DH params in QM - PFS Configured or Requested
by Peer

10-23-2006 08:45:25 PM *Sending proxy ID type 1 172.27.131.211

10-23-2006 08:45:25 PM *Sending proxy ID type 4 0.0.0.0/0.0.0.0

10-23-2006 08:45:25 PM ***Send Quick Mode message to 196.13.220.20

10-23-2006 08:45:25 PM
I-COOKIE=852fbd906d76550b,R-COOKIE=169f29874492ae65,MsgID=a4647017,1stPL=HAS
H-PAYLOAD,state=17037888

10-23-2006 08:46:03 PM IKEQMTimeoutHandler: Packet retransmit exceeded the
limit! the SA will be deleted

10-23-2006 08:46:07 PM IKE-SA a29100 is
Deleted,I-COOKIE=852fbd90,R-COOKIE=169f2987,dst=196.13.220.20

10-23-2006 08:46:07 PM State:3 Cond:4 TimerEvent:3
10-23-2006 08:46:07 PM lifetime :28800 sec Rekey Time :21600 sec

10-23-2006 08:46:07 PM Created at :309263 sec Remaining life time :26452
sec Current time 311611

10-23-2006 08:46:22 PM Time to send a keep-alive packet
10-23-2006 08:47:04 PM Exiting thread for SendKeepAlivePacketProcess