Re: [FW-1] NG FP4 VPN does not work bi-directionally

[Wayne Ho <wenghon828@FW1-NOSPAMYAHOO.COM>]

One thing I recommend is to check disable NAT in VPN
community.

Wayne
--- Brendan Laws <Blaws@CONTENTWISE.COM.AU> wrote:
> Hi people,
>
> I have been looking at this for a while now and I
> can't see anything out
> of the obvious.
>
> I had a FP3 install that had a VPN running between a
> Nokia+FP3 and a
> little Linksys router, it worked fine for many
> months.
>
> I have recently upgraded to FP4 and since then the
> VPN tunnel only works
> when the Linksys contacts my internal networks, I
> can not contact the
> internal network behind the Linksys router now that
> I have upgraded to
> FP4.
>
> Looking at the log viewer I can see that if I pass
> of a connection it
> matches the vpn community rule but then I see in the
> logs a reject under
> rule 0 with "encryption failure: error occurred"
> then directly after
> that message comes the log
>
> Mypc --> pc-behind-linksys DROP --> Packet is drop
> because there is now
> valid SA.
>
> Now if the PC behind the Linksys can bring up the
> tunnel with no
> problems, I can't see anything obvious that should
> be stopping my pc
> from bringing uo the tunnel.
>
> Added to that it all worked in FP3 its only died
> since the upgrade to
> FP4.
>
> Can anyone recommend anything out of the ordinary to
> review?
>
> Cheers,
> Brendan
>
>
>
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV@amadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================


__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================