[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] Tunnels behaving strangely
At 12:31 24.07.2003 +0100, you wrote:
Hi Gurus,
Have two sets of two Nokia IP330s (in HA) that support tunnels between two
sites. Traffic from B to A flows 24x7 without trouble. Particular
traffic from A to B (HTTPS from a server at A to a server at B) seems to
fail for an hour or slightly more at a time, every few days. During the
outage period I have run packet traces at the ingress of the primary IP330
and see the unencrypted traffic at least destined for itself. But there
are no drops or rejects in the log viewer, and the normal 'encrypt' log
entries are also missing. After a time (up to two hours) the traffic
simply begins flowing again normally. All the while traffic initiated in
the other direction flows normally.
Can anyone think of any reason for this?
hi,
do you see any error-message on one of the 2 vpn-endpoints?
check the SA-lifetimes.
cheers
reinhard
--
Reinhard Stich, ASSIST [email protected]
Internet Security AG, 1190 Wien, Nussdorfer Laende 29-33
Tel: +43 1 370 94 40 RS784-RIPE Fax: +43 1 370 94 40-10
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
