| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[FW-1] Problems with AI and IPSec VPN
- To: [email protected]
- Subject: [FW-1] Problems with AI and IPSec VPN
- From: Karl Schrade <[email protected]>
- Date: Mon, 13 Oct 2003 11:37:27 +0200
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- Thread-index: AcORbZ2IdYK84eYGQ82Pkm8GyEQmMA==
- Thread-topic: Problems with AI and IPSec VPN
Hi gurus
Nokia 530 in VRRP mode with IPSO 3.7 and NG FP3 HFA 317. IPSec VPN in
traditional mode to a "shoebox" called ZyWall 10 from Zyxel. Runs without
probs since months. Now I did an upgrade to AI, no config change, but the VPN
to this box is broken. VPN to another CP NG FP3 still runs. In Log I see that
there are probs reported with IKE phase 2 "invalid information".
Changed back to FP3 HFA317 and the VPN runs.
Any ideas what has changed by checkpoint in the IPSec implementation?
BTW: As long as I ran both Nokias in legacy VRRP mode with AI I didn't notice
any probs with only 1 Interface is backing up as some guys reported in the
list. I did tests on VRRP and all worked great.
TIA
Karl
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
|
|
