|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] SecuRemote with IKE
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, On Wednesday 08 May 2002 04:54, Nahshon Vitalis Makajil wrote: > Authentication with FW gives me no problem, but when i try to ping the > internal ip, i get a pop-up sayin user not define properly. > I dunno where it meant by not define properly. At the user ive set the > encryption on IKE and at the FW my encryption is also on IKE only. I guess you configured an Hybrid mode VPN, if you are using IKE and user authentication. Try this: - - In the firewall object, tab VPN, select FWZ encryption and Edit its properties. - - Generate all the keys needed as if you would actually use FWZ scheme. - - Install the rules - - In the firewall object, disable FWZ encryption - - Install the rules - - Bounce the firewall It worked for me. > At the SecuRemote the envryption scheme i chose is also with IKE and ive > check both UDP encapsulation and IKE over TCP. Do you really need both UDP and TCP encapsulation? Cya. - -- Lorenzo Lazzeri Security Specialist EPIClink S.p.A. Tel : +39.02.7030.621 Via Martinelli,39 Fax : +39.02.7030.8223 20031 Cesano Maderno (MI) GSM :http://www.epiclink.it email: [email protected] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iQEVAwUBPNjk3fIb+4tqeDz9AQK0qAgAnkHgHzWn3ycaK/BgE4JVcCubE+OqGtj5 pXI7MJLGaRves2+H9QOD9AbpUqk/yUWxqUW4Dh2rucIPBZ54NcFryvjfOrWjniD7 BuZrUshiFAf6OeMgMqkOQHnj8wV286+cBuE1KbBjcdIAn7JOG1vIf+XqIgkxqMhT /pPcSjyyBOXoM9xsE90MWWH8LA+kXJSYwtn+81c+fIhaogL4ZbcdliOuMOUbBcBc 47chbgc/tgojzvdvLFw4ICvZJbXfSMj9VaLl3ltBtxMIX1MURttwfM8EdhTm0kyx 7P+PlkHLDDGLSdpQCzsBUX0ezdGZebwKHmjp+N88w/TN0HBgRPgKWg== =HUHI -----END PGP SIGNATURE----- ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
