Trouble setting up XAuth in OS 4 to NS remote client

[dmandell]

I have successfully setup a VPN using Auto-IKE to a dynamic peer Netscreen Remote client. So far so good.

But following the instructions in Netscreen document VPN-400-002 letter for letter, as soon as I enable XAuth (local XAuth server option) for the tunnel gateway, (VPN>AutoKey>Advanced>Gateway) the firewall fails to accept Phase 1 proposal. (As reported by the firewall logs)

(it never gets to the point of popping up the XAuth window on the NS remote client computer.)

Has anyone had any success making this work.

To recap, the VPN tunnel sets up and completes P1 & P2, and one can access the LAN behind the firewall until one tries to enable XAuth for the gateway.

(Oh, by the way NS Remote Version 8)

Thanks!
Dana