|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Urgent: - Trying to get a Netscreen 25 working togeth er with VPN-1 NG
Solution ID: sk11100 Creation Date: 04/09/2002 Revised Date: 04/09/2002 Title: How to setup a Check Point VPN-1 NG and Netscreen Gateway to Gateway IKE VPN using Pre-shared Secrets Nico On Fri, Apr 26, 2002 at 11:56:03AM +0100, Jim Parker wrote: > cool what was the ID number of the document? > > > > > > ----- Original Message ----- > From: "Nico De Ranter" <[email protected]> > To: <[email protected]> > Sent: Friday, April 26, 2002 7:50 AM > Subject: Re: [FW-1] Urgent: - Trying to get a Netscreen 25 working togeth er > with VPN-1 NG > > > > Thanks for all the replies. It turns out Checkpoint wrote a document on > how to > > get a Netscreen talk to a VPN-1 NG recently (April 9). I found it through > > the Checkpoint usercenter. I'm not sure what was the problem since I made > > a number of changes afterall. > > > > Anyway it works now :-) > > > > Thanks > > > > Nico > > > > On Thu, Apr 25, 2002 at 11:22:59AM -0700, Russell Washington wrote: > > > Actually, PFS can be applied to both Phase 1 and Phase 2 in NG. Don't > know > > > for sure about the NetScreen-25... Can't remember :( > > > > > > -----Original Message----- > > > From: Jim Parker [mailto:[email protected]] > > > Sent: Thursday, April 25, 2002 9:56 AM > > > To: [email protected] > > > Subject: [FW-1] Urgent: - Trying to get a Netscreen 25 working together > with > > > VPN-1 NG > > > > > > > > > >From those logs I'd be looking at the phase1 IKE negotiation - turn off > > > agressive mode and see how that works. > > > > > > PFS is all a part of Phase2 so don't worry about that yet. Diffie > Hellman > > > exchange is Phase2 as well if I recall so thats not the problem. > > > > > > How are you keying? certificates? pre shared key? > > > > > > > > > > > > ----- Original Message ----- > > > From: "Nico De Ranter" <[email protected]> > > > To: <[email protected]> > > > Sent: Thursday, April 25, 2002 12:04 PM > > > Subject: [FW-1] Urgent: Trying to get a Netscreen 25 working together > with > > > VPN-1 NG > > > > > > > > > > Hi, > > > > > > > > I'm trying to setup a VPN between a Netscreen 25 and a Checkpoint > > > > VPN-1 > > > NG.FP1 > > > > firewall. Unfortunately the Netscreen keeps on refusing the > > > > connection. In the logs I see something like: > > > > > > > > 2002-04-25 11:54:43 system info 00536 IKE <x.x.x.x> Phase 1: > > > Discarded a second initial packet, which arrived within 5 seconds. > > > > 2002-04-25 11:54:39 system info 00536 IKE <x.x.x.x> Phase 1: > > > Rejected proposals from peer (NO PROPOSAL CHOSEN). Negotiations failed. > > > > 2002-04-25 11:54:39 system info 00536 IKE <x.x.x.x> Phase 1: > > > Responder starts aggressive mode negotiations. > > > > > > > > The Checkpoint firewall tries initiates the VPN. > > > > > > > > Any idea what might cause the "No Proposal chosen"? Both sides are > > > > setup to use 3DES with either MD5 or SHA1 (tried both). > > > > > > > > Nico > > > > > > > > --------------------------------------------------------- > > > > "It has been said that there are only two businesses that > > > > refer to customers as users: illegal drug trade and > > > > the computer industry." > > > > --------------------------------------------------------- > > > > Nico De Ranter > > > > Sony Service Center (SDCE/VPE-B) > > > > Sint Stevens Woluwestraat 55 (Rue de Woluwe-Saint-Etienne) 1130 > > > > Brussel (Bruxelles), Belgium, Europe, Earth > > > > Telephone: +32 2 724 86 41 Telefax: +32 2 726 26 86 > > > > e-mail: [email protected] > > > > > > > > ================================================= > > > > To set vacation, Out Of Office, or away messages, > > > > send an email to [email protected] > > > > in the BODY of the email add: > > > > set fw-1-mailinglist nomail > > > > ================================================= > > > > To unsubscribe from this mailing list, > > > > please see the instructions at > > > > http://www.checkpoint.com/services/mailing.html > > > > ================================================= > > > > If you have any questions on how to change your > > > > subscription options, email > > > > [email protected] > > > > ================================================= > > > > > > ================================================= > > > To set vacation, Out Of Office, or away messages, > > > send an email to [email protected] > > > in the BODY of the email add: > > > set fw-1-mailinglist nomail > > > ================================================= > > > To unsubscribe from this mailing list, > > > please see the instructions at > > > http://www.checkpoint.com/services/mailing.html > > > ================================================= > > > If you have any questions on how to change your > > > subscription options, email > > > [email protected] > > > ================================================= > > > > > > ================================================= > > > To set vacation, Out Of Office, or away messages, > > > send an email to [email protected] > > > in the BODY of the email add: > > > set fw-1-mailinglist nomail > > > ================================================= > > > To unsubscribe from this mailing list, > > > please see the instructions at > > > http://www.checkpoint.com/services/mailing.html > > > ================================================= > > > If you have any questions on how to change your > > > subscription options, email > > > [email protected] > > > ================================================= > > --------------------------------------------------------- > > "It has been said that there are only two businesses that > > refer to customers as users: illegal drug trade and > > the computer industry." > > --------------------------------------------------------- > > Nico De Ranter > > Sony Service Center (SDCE/VPE-B) > > Sint Stevens Woluwestraat 55 (Rue de Woluwe-Saint-Etienne) > > 1130 Brussel (Bruxelles), Belgium, Europe, Earth > > Telephone: +32 2 724 86 41 Telefax: +32 2 726 26 86 > > e-mail: [email protected] > > > > ================================================= > > To set vacation, Out Of Office, or away messages, > > send an email to [email protected] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [email protected] > > ================================================= > > > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= --------------------------------------------------------- "It has been said that there are only two businesses that refer to customers as users: illegal drug trade and the computer industry." --------------------------------------------------------- Nico De Ranter Sony Service Center (SDCE/VPE-B) Sint Stevens Woluwestraat 55 (Rue de Woluwe-Saint-Etienne) 1130 Brussel (Bruxelles), Belgium, Europe, Earth Telephone: +32 2 724 86 41 Telefax: +32 2 726 26 86 e-mail: [email protected] ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
