NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW-1] Where are site - site VPN "shared secrets " stored



Hello,

I have been trble shooting a site -site vpn between 2 CP 4.1 firewalls
( i recently upgraded the kernel module on one of them  a Nokia ... to be 3415118 )
since then my site -site vpn has been broken ....

to eliminate wether it is a result of the firewall upgrade or a different problem I want to
remove the current SA's and build the vpn fresh ..

however I believe that the SA's get cashed in various tables ..
i.e

* fw tab -t IKE_SA_table
* fw tab -t outbound_SPI
* fw tab -t ISAKMP_ESP_table
* fw tab -t inbound_SPI

and it is possible to clear these on the fly ..

I also wondered if the encrypted "shared secret " was stored in a flat file somewhere on the module
or management station ... and wether I would need to remove that ???

any thoughts much appreciated

josh

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.