Enable NAT-T allows client but not remote office

[jmondaca]

I have a PIX 515E and when I do not enable NAT-T, my VPN client behind the PAT environment cannot connect to my VPN Server, but my remote office IPsec router can connect back.

If I enable NAT-T, my remote office IPsec router cannot connect back to the office however my VPN client can.

The error I receive is "reserved not zero on payload 5!" and I am sure it is not related to wrong shared key.

Thank you.

[drolemc]

If your remote office router is a third party vendor router, you are probably running into CSCea94045 - ID payload contains protocol 17 but port 0

[jmondaca]

Thank you. I will try version 6.3(4) that corrects this problem.

Jorge.