|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] IKE tunnel between 4.1 sp5 and cisco pix.
It means there's an inconsistency between the access-list references by the Pix crypto map and what you have in the rulebase for encryption.. they need to match exactly... also make sure you don't have "subnet support" checked for the Pix object you created on the Checkpoint. Scott J. Friedman, MCSE CCSE CCNA Security & Cisco Routing Engineer LDMI / Ideal Technology Solutions, U.S. Email : [email protected] Phone :www.itsusnow.com www.ldmi.com >>> [email protected] 05/13/02 10:01AM >>> All, I am trying to establish an IKE tunnel between 4.1 sp5 and a cisco pix. I have set up the rules to allow all between the pix and fw-1 and setup incoming and outgoing rules with action encrypt for the networks on each side. When I attempt to test the tunnel, I get a message in the logs saying "key install" as action "IKE log: Sent Notification no proposal chosen <phase1 stage2> Negotiation Id: " followed by a long hex number, in the info field. Can anyone shed some light on what this message may mean? Thanks in advance for any assistance. Jason Jernigan [email protected] Primus Telecommunications ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
