Deploying domain controllers in a DMZ

Elias Khnaser wrote this whitepaper, I found on here back in July 2004. Its called “Deploying a domain controllers in a DMZ”, and I have a question for him, or anyone else who can answer it.

In his paper he talks about setting up an IPsec connection from the internal to the DMZ, yet his explain uses 2 private IP addresses, rather than a public and a private (Natted) IP.

I want to know what changes need to be made to those in order for both sides to setup the tunnel and talk with each other.

Currently I have it setup and when I ping the other server from the first I get “Negogiating Security Policy” Even several hours or days later.

Anyone with any ideas?

Thanks