NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] VPN: cannot calculate IKE ranges


  • To: [email protected]
  • Subject: Re: [FW-1] VPN: cannot calculate IKE ranges
  • From: Aigar Käis <[email protected]>
  • Date: Thu, 13 Jun 2002 14:27:38 +0300
  • Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
  • Sender: Mailing list for discussion of Firewall-1 <[email protected]>
  • Thread-index: AcISzNU/aIhtcInBQB2Bgx9w5fBALQAACjFA
  • Thread-topic: [FW-1] VPN: cannot calculate IKE ranges

I had similar problem, which got solved after removing NAT for outgoing VPN traffic.


rgds
A

-----Original Message-----
From: Jim Parker [mailto:[email protected]]
Sent: Thursday, June 13, 2002 1:17 PM
To: [email protected]
Subject: Re: [FW-1] VPN: cannot calculate IKE ranges


are the objects the same on both firewalls? primary ip set tp external?

-----Original Message-----
From: Mailing list for discussion of Firewall-1 [mailto:[email protected]]On Behalf Of Nico De Ranter
Sent: 13 June 2002 07:39
To: [email protected]
Subject: Re: [FW-1] VPN: cannot calculate IKE ranges


That's what I thought also. Checked that again right now: ip-address, topology and encryption domain settings for the new firewall are correct :-(. The internal network on the new firewall uses a netmask of 255.255.255.224, I hope that doesn't create any problems :-(

Nico

On Wed, Jun 12, 2002 at 11:06:34PM +0100, Jim Parker wrote:
> you have incorrectly defined the ip addressing of one or more od the
> firewalled objects.
>
>
> -----Original Message-----
> From: Mailing list for discussion of Firewall-1
> [mailto:[email protected]]On Behalf Of Nico
> De Ranter
> Sent: 12 June 2002 16:31
> To: [email protected]
> Subject: [FW-1] VPN: cannot calculate IKE ranges
>
>
> Hello again,
>
> I'm trying to setup a new VPN between 2 firewalls running Checkpoint
> VPN-1 NG FP.1.  When I try to send anything over the VPN I get
> messages in the log stating:
>
> encryption faillure: cannot calculate IKE ranges
>
> Any idea what might cause this?
>
> Thanks in advance,
>
> Nico
>
>
>
> ---------------------------------------------------------
>  "It has been said that there are only two businesses that
>   refer to customers as users: illegal drug trade and
>                the computer industry."
> ---------------------------------------------------------
> Nico De Ranter
> Senior System Administrator
> Sony Service Center (SDCE/VPE-B)
> Sint Stevens Woluwestraat 55 (Rue de Woluwe-Saint-Etienne) 1130
> Brussel (Bruxelles), Belgium, Europe, Earth
> Telephone: +32 2 724 86 41 Telefax: +32 2 726 26 86
> e-mail: [email protected]
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
---------------------------------------------------------
 "It has been said that there are only two businesses that
  refer to customers as users: illegal drug trade and
               the computer industry."
---------------------------------------------------------
Nico De Ranter
Senior System Administrator
Sony Service Center (SDCE/VPE-B)
Sint Stevens Woluwestraat 55 (Rue de Woluwe-Saint-Etienne)
1130 Brussel (Bruxelles), Belgium, Europe, Earth
Telephone: +32 2 724 86 41 Telefax: +32 2 726 26 86
e-mail: [email protected]

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail =================================================
To unsubscribe from this mailing list,
please see the instructions at http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected] =================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail =================================================
To unsubscribe from this mailing list,
please see the instructions at http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected] =================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.