Помогите подружить сабж.

DFL-210: H/W A1, F/W 2.11.02

Настраиваю ISA на основе Configuring IPSec Site-to-Site Connections Between ISA Server 2004 and Third-Party Gateways.
Настраиваю DFL на основе Virtual private network using an IPsec lan-to-lan tunnel.

Настройки ISA:
Local Network: 192.168.1.0/24
Remote Network: 192.168.2.0/24
Local Tunnel Endpoint: 82.*.*.178
Remote Tunnel Endpoint: 62.*.*.54
IKE Phase I Parameters: Mode: Main mode; Encryption: 3DES; Integrity: SHA1; Diffie-Hellman group: Group 2 (1024 bit); Authentication method: Pre-shared secret (***); Security Association lifetime: 28800 seconds.
IKE Phase II Parameters: Mode: ESP tunnel mode; Encryption: 3DES; Integrity: SHA1; Perfect Forward Secrecy: OFF; Diffie-Hellman group: group 2 (1024 bit); Time rekeying: ON; Security Association lifetime: 3600 seconds; Kbyte rekeying: OFF.

Настройки DFL:
General: Local Network: 192.168.2.0/24; Remote Network: 192.168.1.0/24; Remote Endpoint: 82.*.*.178; Encapsulation mode: Tunnel; IKE Algorithms: High; IKE Life time: 28800 seconds; IPsec Algorithms: High; IKE Life time: 3600 seconds; IKE Life time: 0 kilobytes
Authentication: Pre-shared key (***)
Extended Authentication (XAuth): IKE XAuth: off
Roting: Plaintext MTU: 1424; IP address to use as source IP of the tunnel: Automatically pick the address of a local interface that corresponds to the local net
IKE Settings: Main; DH Group: 2; PFS: None; Security Association: Per Net; NAT Traversal: On if supported and NATed

В итоге в логах: