problem with VPN between CheckPoint and a Netscreen

Article View: comp.security.firewalls

Article #473

Back to comp.security.firewalls Previous Next

#473

From: Ignacio
Date: Wed, 14 May 2003 15:02

19 lines
1504 bytes

I have a problem configuring a VPN between a CheckPoint
Firewall-1/VPN-1 and a Netscreen 5XP.
Log files in both Checkpoint and Netscreen device show me the VPN is
up:
keys are installed and IKE Phase 1 and Phase 2 are completed
successfully, however, hosts from Netscreen's LAN cant't make PING to
the other LAN, behind Checkpoint.

Firewall-1 logs show this messages:

"icmp-type 8 icmp-code 0 encryption failure:  Mismatch in encryption
rule configuration"

Does anyone know how to fix it?  anyone have any manual to configure
this two devices?

Thanks in advance,

Ignacio.

Technical Details

Message-ID: <bb82fc1b.0305140702.e49e56e@posting.google.com>

Path: arc1-ca.pugleaf.net!archiver1.google.com!postnews1.google.com!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,f87d9659585cd17e,start
X-Google-Attributes: gidf922c,public
X-Google-Thread: 102e85,f87d9659585cd17e,start
X-Google-Attributes: gid102e85,public
X-Google-ArrivalTime: 2003-05-14 08:02:18 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!postnews1.google.com!not-for-mail
From: engineering@cableonda.net (Ignacio)
Newsgroups: comp.security.firewalls,fa.firewall
Subject: problem with VPN between CheckPoint and a Netscreen
Date: 14 May 2003 08:02:18 -0700
Organization: http://groups.google.com/
Lines: 19
Message-ID: <bb82fc1b.0305140702.e49e56e@posting.google.com>
NNTP-Posting-Host: 200.75.200.72
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Trace: posting.google.com 1052924538 20591 127.0.0.1 (14 May 2003 15:02:18 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: 14 May 2003 15:02:18 GMT