| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] Strange behaviour of a VPN between a PIX and Checkpoint NG/FP3
- To: [email protected]
- Subject: Re: [FW-1] Strange behaviour of a VPN between a PIX and Checkpoint NG/FP3
- From: Lars Troen <[email protected]>
- Date: Mon, 13 Oct 2003 09:35:25 +0200
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- Thread-index: AcORWAryv45bWHXXQbS4eej2+xdvqQAAODBw
- Thread-topic: [FW-1] Strange behaviour of a VPN between a PIX and Checkpoint NG/FP3
JF,
You can enable logging to ike.elg with the command 'vpn debug ikeon'.
Lars
-----Original Message-----
From: Jean-Francois Gobin [mailto:[email protected]]
Sent: 13. oktober 2003 08:44
To: [email protected]
Subject: Re: [FW-1] Strange behaviour of a VPN between a PIX and
Checkpoint NG/FP3
Hello Lars,
I just had a look at it. It seems to correct another bug ...
I can't find a file named "ike.elg" in my $FWDIR/log ...
JF
On Thu, 9 Oct 2003, Lars Troen wrote:
> JF,
> There are some issues regarding Pix<->fw1 vpns that are solved in FP3
> HF2. This is described in sk18456 ("What to do when a VPN tunnel
between
> PIX and Check Point GateWay sporadically fails").
>
> Lars
>
> -----Original Message-----
> From: Jean-Francois Gobin [mailto:[email protected]]
> Sent: 9. oktober 2003 19:59
> To: [email protected]
> Subject: [FW-1] Strange behaviour of a VPN between a PIX and
Checkpoint
> NG/FP3
>
>
> Hello all,
>
> We have a really strange phenomenon in a VPN between a PIX and a
> Checkpoint module (NG/FP3).
>
> >From time to time, the VPN stops working. IPSEC packets come in, but
are
> dropped (reason : "No valid SA"). And for each packet being dropped, a
> packet "Delete IPSEC SA" is sent from the Checkpoint.
>
> Fortunately, the solution is not really difficult : recompiling. But
> every
> times, the guy at the other site rings like hell ...
>
> Any idea ?
>
> JF
>
> --
> Jean-Francois Gobin - Administrateur gobinjf.be
> http://www.gobinjf.be mailto:[email protected]
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>
--
Jean-Francois Gobin - Administrateur gobinjf.be
http://www.gobinjf.be mailto:[email protected]
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
|
|
