Problems w/IPSec and Netopia Cayman DSL router

Article View: comp.security.firewalls

Article #401

Back to comp.security.firewalls Previous Next

#401

From: solarmax
Date: Mon, 03 Mar 2003 21:45

13 lines
2165 bytes

I am working on a customer's site attempting to use Checkpoint's SecuRemote
over a Netopia cayman 3546 DSL router. I am able to authenticate against my
Checkpoint firewall but I cannot access any server I am entitled to given
the account I am using.

I have tried playing with enabling and disabling IPSec Passthrough along
with forcing UDP encapsulation and allowing IKE over TCP. I have also
enabled IKE over TCP in my Global properties on the firewall. My customer
uses a DSL provider that does not block IPSec traffic. I have tried setting
"pinholes" for ip 50 and 51. I am at a loss as what I need to do to allow
this customer to access servers behind my Checkpoint NG firewall.

TIA for your help!

Technical Details

Message-ID: <K1Q8a.2650$se1.1818421@newssvr28.news.prodigy.com>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!c03.atl99!rip!news.webusenet.com!prodigy.com!newsmst01.news.prodigy.com!prodigy.com!postmaster.news.prodigy.com!newssvr28.news.prodigy.com.POSTED!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,1f997ebc1aea7a8a,start
X-Google-Attributes: gidf922c,public
X-Google-Thread: 10ec9e,1f997ebc1aea7a8a,start
X-Google-Attributes: gid10ec9e,public
X-Google-ArrivalTime: 2003-03-03 12:48:03 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!c03.atl99!rip!news.webusenet.com!prodigy.com!newsmst01.news.prodigy.com!prodigy.com!postmaster.news.prodigy.com!newssvr28.news.prodigy.com.POSTED!not-for-mail
From: "solarmax" <solarmax62@hotmail.com>
Newsgroups: comp.security.firewalls,cp.products.securemote
Subject: Problems w/IPSec and Netopia Cayman DSL router
Lines: 15
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Message-ID: <K1Q8a.2650$se1.1818421@newssvr28.news.prodigy.com>
NNTP-Posting-Host: 198.109.198.20
X-Complaints-To: abuse@prodigy.net
X-Trace: newssvr28.news.prodigy.com 1046727914 ST000 198.109.198.20 (Mon, 03 Mar 2003 15:45:14 CST)
NNTP-Posting-Date: Mon, 03 Mar 2003 15:45:14 CST
Organization: Prodigy Internet http://www.prodigy.com
X-UserInfo1: OPXWS^SDFRRMBWLX]ZHXOFXBWR\HPCTL@XT^OBPLAH[\RYIBK^RAQFW[ML\THRCKV^GGZKJMGV^^_JSCFFUA_QXFGVSCYRPILH]TRVKC^LSN@DX_HCAFX__@J\DAJBVMY\ZWZCZLPA^MVH_P@\\EOMW\YSXHG__IJQY_@M[A[[AXQ_XDSTAR]\PG]NVAQUVM
Date: Mon, 03 Mar 2003 21:45:14 GMT