[vpn-help] Can't connect Shrewsoft to SSG5

[Igor Birman]

I am trying to connect to an SSG5.  I followed the guide:


http://www.shrew.net/support/wiki/HowtoJuniperSsg

but the client stops at "bringing up tunnel" and then hangs there forever.  On the server, I have the following messages:

2010-06-24 07:47:03    info    IKE<71.191.197.230>: Received initial contact notification and removed Phase 1 SAs.
2010-06-24 07:47:03    info    IKE<71.191.197.230>: Received initial contact notification and removed Phase 2 SAs.
2010-06-24 07:47:03    info    IKE<71.191.197.230>: Received a notification message for DOI <1> <24578> <INITIAL-CONTACT>.
2010-06-24 07:47:03    info    IKE<71.191.197.230> Phase 1: Completed Aggressive mode negotiations with a <28800>-second lifetime.
2010-06-24 07:47:03    info    IKE<71.191.197.230> Phase 1: Completed for user <Test>.
2010-06-24 07:47:03    info    IKE<71.191.197.230> Phase 1: IKE responder has detected NAT in front of the remote device.
2010-06-24 07:47:03    info    IKE<71.191.197.230> Phase 1: IKE responder has detected NAT in front of the local device.
2010-06-24 07:47:03    info    IKE<71.191.197.230> Phase 1: Responder starts AGGRESSIVE mode negotiations.

What am I missing?


Thanks,
Igor
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.shrew.net/pipermail/vpn-help/attachments/20100624/7336a827/attachment-0001.html>