[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [FW-1] Help with VPN between fw-1 4.0 and Netscreen-100
Wondering if anyone has any tips or tricks to getting a VPN up between fw-1 4.0 and a Netscreen. >From the Netscreen logs I can see that it's completing Phase 1 but not getting past Phase 2 I've setup a similar configuration on my test network except I'm using a fw-1 4.1 and everything works OK. My environment is connecting from my DMZ (public IP) to another sites DMZ (public IPs), so that rules out a NAT issue. Here's my Netscreen log if thats any help: 00536 IKE <Checkpoint IP> Phase 2: Initiated negotiations.(initiator) 00536 Phase 1 (Checkpoint IP) complete, AGGR mode, 28800sec. 00536 IKE <Checkpoint IP> Phase 1: Initiated negotiations in aggressive mode. I'm stuck on why it just hangs, I've had problems with other CP4.1 VPN's but usually it'll give me some clue with an error on a policy/network issue. Thanks! Lonny -- Lonny Schwartz Micromuse Inc. [email protected] ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|