Phillip Remaker schrieb:
Is the WinXP client behind a NAT device? Does the NAT device support
> IPSEC/ESP NAT?
The same problem persists even if they are directly connected to each other. Another interesting point I forgot to mention might be that the first 4 ISAKMP packets pass as expected, but then the client does not initiate the final exchange (authentication) in main mode. A packet trace looks like this:
ISAKMP 10.0.0.2 --> 2.2.2.2 ISAKMP 2.2.2.2 --> 10.0.0.2 ISAKMP 10.0.0.2 --> 2.2.2.2 ISAKMP 2.2.2.2 --> 10.0.0.2
ISAKMP 2.2.2.2 --> 10.0.0.2 ISAKMP 2.2.2.2 --> 10.0.0.2