Re: problem with VPN between CheckPoint and a Netscreen

Article View: comp.security.firewalls

Article #474

Back to comp.security.firewalls Previous Next

#474

From: SA
Date: Thu, 15 May 2003 00:27

27 lines
1829 bytes

Double check your Phase 1 and Phase 2 on both sides.

-Scott

-- 
quaere verum
"Ignacio" <engineering@cableonda.net> wrote in message
news:bb82fc1b.0305140702.e49e56e@posting.google.com...
> I have a problem configuring a VPN between a CheckPoint
> Firewall-1/VPN-1 and a Netscreen 5XP.
> Log files in both Checkpoint and Netscreen device show me the VPN is
> up:
> keys are installed and IKE Phase 1 and Phase 2 are completed
> successfully, however, hosts from Netscreen's LAN cant't make PING to
> the other LAN, behind Checkpoint.
>
> Firewall-1 logs show this messages:
>
> "icmp-type 8 icmp-code 0 encryption failure:  Mismatch in encryption
> rule configuration"
>
> Does anyone know how to fix it?  anyone have any manual to configure
> this two devices?
>
> Thanks in advance,
>
> Ignacio.

Technical Details

Message-ID: <vc5oobbmdhkn89@corp.supernews.com>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!sn-xit-03!sn-xit-01!sn-post-01!supernews.com!corp.supernews.com!not-for-mail

References: <bb82fc1b.0305140702.e49e56e@posting.google.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,f87d9659585cd17e
X-Google-Attributes: gidf922c,public
X-Google-Thread: 102e85,f87d9659585cd17e
X-Google-Attributes: gid102e85,public
X-Google-ArrivalTime: 2003-05-14 17:45:02 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!sn-xit-03!sn-xit-01!sn-post-01!supernews.com!corp.supernews.com!not-for-mail
From: "SA" <noel@coserv.net>
Newsgroups: comp.security.firewalls,fa.firewall
Subject: Re: problem with VPN between CheckPoint and a Netscreen
Date: Wed, 14 May 2003 19:27:18 -0500
Organization: Posted via Supernews, http://www.supernews.com
Message-ID: <vc5oobbmdhkn89@corp.supernews.com>
References: <bb82fc1b.0305140702.e49e56e@posting.google.com>
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
X-Complaints-To: abuse@supernews.com
Lines: 29

Reply to Parent Message