[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] vpn problems
Well I did not see any encrypt in log. I know I do not have a routing problem since when I use any any accept it works. this is network: 10.0.0x----10.0.0.1(firewall)----router----(firewall)----11.0.0.x 10.0.0.x in nated to outside and so is 11.0.0.x When 10 wants to talk with 11 it does not NAT. When using IKE, the packet is already being encapsulated by the firewall right ? . I did try FWZ and then I experienced a new things, I could see in one side encryp and on the other side decryp but the connection got hang.... help..... -----Original Message----- From: Murphy, Paul [mailto:[email protected]] Sent: Tuesday, September 26, 2000 12:48 PM To: 'Idan Dolev'; Firewall_Mailing_List (E-mail) Subject: RE: [FW1] vpn problems Can you clarify a little: The Linux box is decrypting, but the NT box is saying "not IPSEC". So where if anywhere are you seeing the packet ENcrypt? You'll see the error "not IPSEC" when a non encrypted packet (ie one already decrypted) gets reintroduced to the firewall and rematches the encryption rule. This is often a result of a routing problem. Paul. -----Original Message----- From: Idan Dolev [mailto:[email protected]] Sent: 26 September 2000 09:42 To: Firewall_Mailing_List (E-mail) Subject: [FW1] vpn problems Hi guys, I am trying to establish a VPN connection between an NF firewall 4.0 sp5 and a Linux with 4.1 no sp.Both are in single gateways mode. I put the same secret key in both, defined the encryption domains and set the rules with IKE. However I have being getting the message " packet is not IPSEC scheme" in the NT firewall while in my Linux I see decrypt. Any suggestion ??? ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ---------------------------------------------------------------------------- ----- This e-mail is intended only for the above addressee. It may contain privileged information. If you are not the addressee you must not copy, distribute, disclose or use any of the information in it. If you have received it in error please delete it and immediately notify the sender. evolvebank.com is a division of Lloyds TSB Bank plc. Lloyds TSB Bank plc, 71 Lombard Street, London EC3P 3BS. Registered in England, number 2065. Telephone No: 020 7626 1500 Lloyds TSB Scotland plc, Henry Duncan House, 120 George Street, Edinburgh EH2 4LH. Registered in Scotland, number 95237. Telephone No:Lloyds TSB Bank plc and Lloyds TSB Scotland plc are regulated by the Personal Investment Authority and represent only the Scottish Widows and Lloyds TSB Marketing Group for life assurance, pensions and investment business. Members of the UK Banking Ombudsman Scheme and signatories to the UK Banking Code. ---------------------------------------------------------------------------- ------ ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|