I am trying to create a site to site vpn between two 1470s. One side is natted behind the ISP router and the other is passed straight through. I have tried with passphrase and certs. The sites will connect and authenticate but then I get this error.

failure: Auth exchange: Sending notification to peer: Traffic selectors unacceptable

I tried every option for defining each sides encryption domain and I am over my head at this point. Any help would be appreciated.