[FW-1] 4.0 to 4.1 (checkpoint 2K) VPN

[Christopher Ferraro <cferraro@FW1-NOSPAMHUBBARDONE.COM>]

Title: Message

All:

 

I'm trying to set up an IPSEC VPN between an NT 4.0 SP 5 checkpoint 4.0 box and a Win2k, SP2, checkpoint 2K box.

 

I'm pretty sure I've got everything the same on both ends in terms of encryption.

 

However, everytime i try to access one end of the VPN from the other, I see the log of the firewall run a key install and then fail based on the appropriate rule number -- in other words if I'm going from my florida vpn end to my LA vpn end, and that is rule number 8, i will see a drop in the logs based on that rule number.

 

I've set up three rules on both firewalls:

 

rule number            source            dest            service            action

1                        flfw                    flfw                IPSEC            encrypt

                         lafw                    lafw                           

 

2.                    vpngroupfl         vpngroupla        any                  encrypt

 

3                    vpngroupla        vpngroupfl          any                  encrypt

 

Inside the vpngroups i have the local lans and firewalls.

 

the firewall objects use on IKE on the VPN tab, and the shared secret has been verified and set

 

I see no errors in the event viewer at all, just informational notices that i've logged on and off.

 

Is there a problem with setting up a VPN between  4.0 and 2K firewalls that i am not aware of  ?  What else should I be looking at ?

 

Thanks in advance,

 

CF