Christian ERDT wrote:
 > Hi !!
 >
 > The vpn Server is a m0n0wall (at home) ...
 >
 > i will connect from office ... (behind NAT)
 >
 > i can  connect with the ipsec client ....
 >
 > but i can not ping a client behind the m0n0wall
 >
 > when i hab a public IP (without nat) i can ping all clients behind the
 > m0n0wall with the same settings
 >

That's because FreeBSD doesn't support NAT-T, which is required for
IPsec to work behind NAT on the remote end.
http://m0n0.ch/wall/list/?action=show_msg&actionargs%5B%5D=79&actionargs%5B%5D=36

Unfortunately, there's no way to fix that at this point.  OpenVPN,
which is in the current beta versions, might be a good solution.

-Chris