Winblows XP and OSX VPN server

I now have got a XP machine connecting successfully to the Apple VPN server, but only if I use public IPs at both ends. The Windows NAT-T patch 818043 does "nothing". There must be some "misunderstandig" happening when the client and server negotiates, compared to how a Mac 10.3 client does it. Anyone knows what's wrong?