NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW-1] VPN between Fw-1 & 3Com



Hi
I'm having problems trying to set up a vpn between my Nokia 440 (ipso 3.4.1) running FW-1 to a clients 3Com superstack firewall.

We initially tried IKE (3des/md5/shared secret) set up with the set up recommended by checkpoint, ie, the vpn tabs on each fw were identical, and the policy encryption stipulated the same.

On the log we had success after a key install between firewalls, then a decrypt ping from his followed by the accepted ping, then there was our accepted ping going to him - then instead of the encrypted ping out - nothing!
His log comes back with "IPsec proposal not acceptable".
I can ping his firewall but not his internal network.
I can traceroute from an internal box to his firewall in 1 hop but cannot see his internal network.
I have seen a mail about nokia (checkpoint) packets not being able to fragment if required unless you download a patch from nokia, but that is usually for big packets not small like icmp.


Can anyone help shed any light on this?

Thanks in advance





regards,

Rory Stewart
Systems Engineer

[email protected]

=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
If you have any questions on how to change your
subscription options, email Ron Alcatraz at:
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.