Re: L2TP/IPSEC VPN behind static NAT not working

I'm assuming that your srx is public facing router, with following configuration

security {
    nat {
        source {
            address-persistent;
        }
        static {
             rule-set bt {
                from interface pp0.0;
                    rule vpn {          
                        match {                 
                            destination-address x.x.x.147/32;
                        }                       
                        then {                  
                            static-nat {                
                                prefix {                        
                                       10.0.0.201/32;                  
                                }                               
                            }                           
                        }                       
                    }                   
                }               
            }           
        }       
    }   

please do remember that static nat is itself persistant, also the persistant snipper above is for source nat so not useful at all.

Can you share the output of show security nat  static rule all and see if counters are incremented ?

if yes, then srx configs looks good.

Now check with the router on which your tunnel is terminated, since NAT is now into play, this is not usual ipsec tunnel port 500 setup.

Need to varify if NAT-T is enable on your dratetk software.