|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [FW-1]
It looks like you have "accept ICMP" option checked in the FW properties as "first" rule. If this is the case, your test PING packet will be passed through firewall without being encrypted. You can change it as "before last" and make sure allow ICMP in the encryption rule. >Date: Thu, 3 Jan 2002 15:08:48 +0100 >From: Tomas Chan <[email protected]> >Subject: VPN Problem: encryption failure: Packet is not IPSEC scheme: IKE > >Hi all, > >I have setup a VPN between two firewalls, using IKE. The key exchange is >OK, phase 1 and phase 2. >But when I try a ping from a host on one side of the VPN to a host at the >ther side, the FW logs >n event, action reject, info: "icmp-type 8 icmp-code 0 encryption >failure: Packet is not IPSEC >scheme: IKE" > >The network topology is as follows: > >host A - internal network A -- FWa ---<internet>---FWb -- internal >network B - host B > >Pings from FWa to FWb or viceversa are OK. Host A has a route to network B, >gateway >FWa > >Both FW1 are running under Solaris (SP3 & SP5). > >Any suggestion is welcome. > >Thank you. > > Tomas. ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
