BEFVP41 V2 Router Problem Router is directly connected to internet with a static IP. This router is connected to another BEFVP41 with the same settings as below, works fine. Password is a sample, not real. Router Side: IPSec Pass-Through: Enabled PPPoE Pass-Through: Enabled PPTP Pass-Through: Enabled Select Tunnel Entry: Tunnel2 (ROADWARRIOR1) VPN Tunnel: Enabled Tunnel Name: ROADWARRIOR1 Local Secure Group: Subnet IP: 10.0.0.0 Mask: 255.255.255.0 Remote Secure Group: Any Remote Security Gateway: Any Encryption: 3DES Authentication: MD5 Key Management: Auto. (IKE) PFS: Enabled Pre-shared Key: test1234 Key Lifetime: 3600 Sec. Advanced Tunnel 2 Phase 1 Operation Mode: Main Encryption: 3DES Authentication: MD5 Group: 1024-bit Key Lifetime: 3600 seconds Phase 2 Same as phase 1 but says PFS: ON No other settings checked Client Side: Client is on a dynamic address that rarely changes. Firewall is a D-Link DI-614+. Internal address is 192.168.0.102. IPSEC and PPTP (including GRE) being forwarded to the internal address - even attempted using DMZ with no success. Remote Endpoint Security Gateway (Destination Router's WAN Address) Remote Network: 10.0.0.0 Mask: 255.255.255.0 Authentication Key: MyKey (with test1234 password) Proposal Template: legacy IKE Proposal: Encryption Algorithm: 3DES Integrity Function: MD5 IKE mode: main mode IKE group: MODP 1024 (group 2) IPSec Proposal: Encryption Algorithm: 3DES Integrity Function: HMAC-MD5 IPSec mode: tunnel PFS group: MODP 1024 (group 2) Attach only the selected values to the proposal (selected) Aquire Virtual IP address: DHCP over IPSec Advanced: Lifetimes all default, Discover path MTU When I attempt to connect to the router from my client, I get the following results: 2006-06-25 14:30:47 UDP from 24.x.x.x:500 to 142.x.x.x:500 2006-06-25 14:30:47 IKE Rx << MM_I1 : 24.x.x.x SA, VID 2006-06-25 14:30:47 IKE Tx >> MM_R1 : 24.x.x.x SA 2006-06-25 14:30:47 IKE ISAKMP SA CKI=[71e2db33 e9000001] CKR=[e1b4ab8c 4847da50] 2006-06-25 14:30:47 IKE ISAKMP SA 3DES / MD5 / PreShared / MODP_1024 / 14400 sec (*14400 sec) 2006-06-25 14:30:48 IKE Rx << MM_I2 : 24.x.x.x KE, NONCE 2006-06-25 14:30:48 IKE Tx >> MM_R2 : 24.x.x.x KE, NONCE 2006-06-25 14:30:49 IKE **Check your ISAKMP Pre-share Key setting ! 2006-06-25 14:30:49 IKE Tx >> Notify : INVALID-PAYLOAD-TYPE Any ideas?