<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:arial,helvetica,sans-serif;font-size:12pt">I am trying to connect to an SSG5. I followed the guide:<br><div style="font-family: arial,helvetica,sans-serif; font-size: 12pt;"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div style="font-family: arial,helvetica,sans-serif; font-size: 12pt;"><br><span><span><a target="_blank" href="http://www.shrew.net/support/wiki/HowtoJuniperSsg">http://www.shrew.net/support/wiki/HowtoJuniperSsg</a></span></span><br><br>but the client stops at "bringing up tunnel" and then hangs there forever. On the server, I have the following messages:<br><br>2010-06-24 07:47:03 info IKE<71.191.197.230>: Received initial contact notification and removed Phase 1 SAs.<br>2010-06-24 07:47:03 info
IKE<71.191.197.230>: Received initial contact notification and removed Phase 2 SAs.<br>2010-06-24 07:47:03 info IKE<71.191.197.230>: Received a notification message for DOI <1> <24578>
<INITIAL-CONTACT>.<br>2010-06-24 07:47:03 info IKE<71.191.197.230> Phase 1: Completed Aggressive mode negotiations with a <28800>-second lifetime.<br>2010-06-24 07:47:03 info IKE<71.191.197.230> Phase 1: Completed for user <Test>.<br>2010-06-24 07:47:03 info IKE<71.191.197.230> Phase 1: IKE responder has detected NAT in front of the remote device.<br>2010-06-24 07:47:03 info IKE<71.191.197.230> Phase 1: IKE responder has detected NAT in front of the local device.<br>2010-06-24 07:47:03 info IKE<71.191.197.230> Phase 1: Responder starts AGGRESSIVE mode negotiations.<br><br>What am I missing?<br><br><div>Thanks,<br>Igor</div></div></div></div>
</div></body></html>