[FW1] Checkpoint - Watchguard VPN

[Andre van der Lans <andrel@FW1-NOSPAMkpn.net>]

Hi,

I''ve tried to configure a VPN between a Checkpoint Firewall-1 and a watchguard, but it won't work.
The checkpoint firewall is running on version 4.1 sp 1 and the watchguard is running LSS4.5.

The log messages in the firewall-1 logmonitor showed that the watchguard site is not responding 
on IKE negotiations. 
Logging: encryption failure: no response from peer scheme IKE

The following logging came from the watchguard:
28538 12/08/00 14:14:51 iked[87] Adding previous packet at slot 0 (194.151.255.162)
28548 12/08/00 14:14:51 iked[87] Delete SA!
28558 12/08/00 14:14:51 iked[87] ipsec_cancel_acquire: Called as responder
28568 12/08/00 14:14:51 iked[87] ipsec_cancel_acquire: ci_vpn_id does not point to a key_request structure.
28578 12/08/00 14:14:51 iked[87] About to process `sa' payload
28588 12/08/00 14:14:51 iked[87] checking ISA_SA
28598 12/08/00 14:14:51 iked[87] proposal is unacceptable. mess_id=0
28608 12/08/00 14:14:51 iked[87] Error processing (sa) 
28618 12/08/00 14:14:51 iked[87] Main Mode processing failed
28628 12/08/00 14:14:53 iked[87] Skipping duplicate packet from 194.151.255.162 cached in slot 0
28648 12/08/00 14:14:55 iked[87] Skipping duplicate packet from 194.151.255.162 cached in slot 0
28658 12/08/00 14:14:57 iked[87] Skipping duplicate packet from 194.151.255.162 cached in slot 0

Looks like that there are some problems with the IKE negotiation, does anybody has a clue?

Regards, Andre



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================