On 10/29/07, Joe Commisso <jemc at twcny dot rr dot com> wrote:
> It acts the same with or without NAT Traversal.
> Could it be that there is something that is persistent that needs to be
> I tried a reboot and still can't ping anything but the m0n0 nic.
> Strange that I don't get an SA until I ping through to the internal NIC
> of the other m0n0.
The config looks fine.
Is the LAN IP on the other side the default gateway for that network?
If not, you need a route on whatever their default gateway is,
pointing that subnet to the VPN endpoint's LAN IP. Otherwise the
traffic is getting there, getting replied to, but the replies go to
the default gateway for that network.