[FW1] Securemote license on nokia VPN High Avalability solution

[chj@FW1-NOSPAMesec.dk]

Hi all,


I have 2 Nokia 440 boxes with Nokias High Avalability  and I am trying to get it to work with Securemote (and SecureID). I have received a special Securemote license for the virtual IP-address and installed it on the management station. Is this correct or do I have to have 2 Securemote licenses, one for each actual IP-address ??
When I try to connect with the Securemote client I can see with TCPDUMP on the Nokiabox a TCP-request from the Securemote client on port 256 and 264, but there are no traffic back to the Securemote client - this, I think, could indicate at license problem or what ??

Another question - In order to get IKE to work with Secureid I have to Hybrid mode IKE, and I have to create an Internal CA on the management station and a certificate fot the fw-module with fw internalca command. My problem is, that I can't see it in the FW object under Certicates .... Any 

The Firewall is VPN 4.1 SP3
and the securemote clients are  v. 4.1 SP3 build 4176

Thanks for your help



Christian H. Jensen

.................................................................................. 

eSec A/S - Managed Security 

http://www.esec.dk 
Telefon: +45 7020 5585 
Direkte:  +45 4450 2073
Mobil:     +45 20192510
..................................................................................