NilsG

done, but still not working. Yes there are public IP adresses on the WAN interface on both sites.

Hmm does not work. i´l try to sum up: No ISP routers or modems on any site. Site one: IP = Static VPN type = "Site to site with dynamic peer Auth = preshared key SA Life = 28800 Negotiation = Agressive Encryption = AES128 and SHA1 Nat traversal = on DPD = on on connection: Naild-Up = off Site two: IP = Dynamic but public…

will try this, though there is no ISP routers or modems at all so that is not a problem.