I think it is pretty sad that you have bandwidth limitations built into the software now. I understand licensing for software that performs duties a normal router wouldn't do, and paying for a license to run it in the router IOS. But I am purchasing ...
Thanks -- out of the 4 examples I found on the internet, this was the only one that actually worked. Seems the Pass is a requirement for ISAKMP, thus needing to create the zone-pair in opposite direction as well.