Re: [FW-1] SecuRemote over DrayTek Vigor We2500

[Alexander Banthien <alexander@FW1-NOSPAMPARENTPAY.COM>]

Hi Marc,

thanks for the help. I even remember having solved a similar problem
through fiddling with the MTU. Unfortunately I couldn't seem to get the
MTU set on the client (SecureClient on Win 2000) I added
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
EnablePMTUDiscovery = 2 and also tried adding a key MTU with various values.

The SecureClient Diagnosis tool kept telling me the MTU was 1500 (which
is supposedly the default on my local Ethernet).

Alexander

Marc Elsen wrote:
> Alexander Banthien wrote:
>
> > Hi,
> >
> > I have recently switched over to using a DrayTek Vigor We2500 DSL Router
> > as NAT gateway to the internet for my private LAN.
> > Since I did so, I cannot connect my SecuRemote clients (Build number
> > 53515 Check Point VPN-1 SecureClient NG Feature Pack 3) to the Firewall
> > (VPN-1, 4.1 supposedly, hosted and maintained by our hosting provider)
> > located on the internet.
> > We are using certificates for authentication.
> >
> > Has anybody succeeded in getting this or a similar setup running? If
> > yes, may I ask how?
> >
> > Alexander
>
>
>  One common trick is to try to lower MTU at the SecureClient side.
>
>  M.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV@amadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================


--
---------------------
Alexander Banthien
ParentPay Ltd.
Project Manager
+49 (0)---------------------

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================