[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] Raptor to FW1 ISKMP tunnel issues.
If packets indeed only make to the router, then it would seem like a routing problem with the router. Check that first. Maybe get a sniffer on the firewall's interface to verify. If not, we need a little more information. What do your logs show for both firewalls about the key exchange? Anything? Make sure Log ISAKMP Negotiations is checked under Policy-> Properties-> Log and Alert. Which version of Raptor are you using? -----Original Message----- From: Dennis Donohue [mailto:[email protected]] Sent: Tuesday, March 13, 2001 4:30 PM To: [email protected] Subject: [FW1] Raptor to FW1 ISKMP tunnel issues. I am currently facing a situation where I have a remote office behind a Raptor firewall that must connect to the main location somehow. Originally we decided to use SecuRemote, but upon further investigation, we found that the Raptor firewall uses NATing and works like a proxy server for internet access. We then decided to set up a secure tunnel, but based on the lacking compatiblity with IPsec tunneling we are forced to use ISKMP encryption. I am having severe problems getting a tunnel set up to my Checkpoint FW1 v4.0 SP3 running on an NT box. I have set everything up correctly on the Raptor side, and have followed strict intrsuctions on how to set up rules for my FW1, yet it seems the packets get to my router and go no further. Can anyone help me on this one, or even point me in the direction of help? I would really appreciate it, Thanks, Dennis M. Donohue Network Administrator Aquion Partners L.P.(phn)(mobile)(fax) ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|