NS 5GT vs. DrayTek Vigor 2900VG

[Pehan]

Hello good people!

I'm trying to set up a VPN between a DrayTek Vigor 2900VG and a NetScreen-5GT. 

After much trial and error I have managed to get them to go through phase1 and (semingly) phase2: 

2008-09-26 13:55:23 info IKE<172.30.3.121> Phase 2 msg ID <ca91cb2f>: Completed negotiations with SPI <c8dced6a>, tunnel ID <4>, and lifetime <3600> seconds/<0> KB. 2008-09-26 13:55:23 info IKE<172.30.3.121> Phase 2: Initiated negotiations. 2008-09-26 13:55:23 info IKE<172.30.3.121> Phase 1: Completed Main mode negotiations with a <28800>-second lifetime. 2008-09-26 13:55:22 info IKE<172.30.3.127> >> <172.30.3.121> Phase 1: Initiated negotiations in main mode.

However, the tunnel never comes active. 

Where do I start to fix this? Please advice!

[Pehan · Accepted solution]

Update:

Seems like it may have been the Vigors fault..  I tried "dialing" in to the Vigor instead of  "dialing" out, and that did the trick. VPN is up and running.