I'm trying to get the Cisco VPN client on my mac to connect (tunnel) to a
cisco 3000 concentrator thru m0n0wall...

Setup:

cisco3000<--->"Internet"<----------->cisco678(bridging)<--->m0n0wall(dynamic
ip)<--->lan(192.168.1.0 subnet)<--->mac(192.168.1.1/fixed)

I have rules to allow ESP in from the concentrator
I have a rule to allow udp/500 in from the concentrator

I have the generic "ALL" out rule.

Based on the archive I also tried NATing udp/500 to the mac, and still no
joy.

The concentrator "sees" the group login, but never starts the user
authentication.

Am I missing something basic?

I don't have anything setup under IPsec on  m0n0wall

Ideas?

Thanks,
-- 
Andrew