[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Auto-Summarize in Encryption domain
Hi, This sounds like it's the Cisco that is doing the auto summarizing. See iof there is a no auto-summary command for the VPN setup on the Cisco. They use this command for some of their routing protocols. HTH, Pete Goodridge --- "Roelandts, Guy" <[email protected]> wrote: > Martin, > > We have seen this too and found no work-around as > of today. We were > setting up a vpn-to-vpn between a Cisco with IOS > 12.1. > > In the output of a debug crypto session we could > see : > > src_proxy= x.y.x.0/255.255.254.0/0/0 (type=4) > > We checked the complete CheckPoint config and > found nowhere this > mask defined ... anyone else seen this and solved > it? > > Met vriendelijke groeten - Bien à vous - Kind > regards > Guy ROELANDTS > EMEA GS Internet Expertise Centre - CCSE-NG > Compaq BeLux - now part of the New HP > E-mail : [email protected] > Tel: +32(02)729.77.44 (options 3 - 3 - 1) > Fax: +32(02)729.77.65 > ========================================================== > This message may contain confidential and/or > proprietary information, > and is intended only for the person/entity to whom > it was originally > addressed. The content of this message may contain > private views and > opinions which do not constitute a formal disclosure > or commitment > unless specifically stated. Should you receive this > message by mistake > please inform the sender immediately. > ========================================================== > > > -----Original Message----- > From: Martin Christen > [mailto:[email protected]] > Sent: 12 November 2002 07:53 > To: [email protected] > Subject: [FW-1] Auto-Summarize in Encryption domain > > > Hello > We use NG FP 2 on a solaris 8 box. > In the our Group "Encryption_Domain"we have two > networks 192.168.8.0/24 and > 192.168.9.0/24. > On the other site we use a cisco vpn concentrator > from which we try to > connect to 192.168.8.0/24 network. > On the cisco device we see that the network is > recognized as 192.168.8.0/23 > what meens that no vpn connection can be > established. If we remove the > 192.168.9.0/24 from the Group "Encryption_Domain" it > works fine. > Is there a switch to disable this auto-summarizing? > > Regards > > Martin > > > > > __________________________________http://www.clounet.ch > > Martin Christen > NMS/Security Consultant > > Phone: +41(0)31 950 55 83 > ClouNet AG > Fax: +41(0)31 950 55 90 > Ammannstrasse 1 > [email protected] CH-3074 Muri b. > Bern > ________________________________________________________ > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= __________________________________________________ Do you Yahoo!? U2 on LAUNCH - Exclusive greatest hits videos http://launch.yahoo.com/u2 ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|