RE: [FW1] Hybrid IKE

[Peter Goodridge <petegdr@FW1-NOSPAMyahoo.com>]

Tim,

Thanks much.  That was the problem.

Pete Goodridge

--- "Frost, Timothy E" <timothy.frost@eds.com> wrote:
> Pete,
> 
> 
> > -----Original Message-----
> > From:	Peter Goodridge [SMTP:petegdr@yahoo.com]
> > 
> > Hi,
> > 
> > I'm running Checkpoint Nokia firewalls v4.1 sp5,
> with
> > a Sun Management station also v4.1 sp5.  I'm
> trying to
> > follow Checkpoint's procedure to get Hybrid IKE
> > working, and can't past step 3.
> > 
> > 1. I stop the fw and management station (note the
> fw
> > is at a remote site.)
> > 
> 	[Frost, Timothy E]  You don't need to touch the
> remote firewall
> module, because all of the internalca commands are
> done on the MANAGEMENT
> station.  (This is stated explicitly in the section
> on fw internalca in the
> Checkpoint 2000 Getting Started Guide)
> 
> > 2.  On the management station I do :
> > fw internalca create -dn "o=firewall, c=us"
> > and get:
> > Internal CA created successfully
> > 
> 	Looks OK.  
> 
> > 3. On the remote fw I do:
> >  fw internalca certify -o firewall "o=firewall
> c=us"
> > 
> 	 
> 	As I said above, all operations are done on the
> management station.
> 
> 	Try running the following on the management
> station, for each of the
> firewall modules:
> 		fw internalca certify -o firewall 
> 
> 	(You don't specify the dn parameter in the certify
> operation.)
> 
> > but I get the error message:
> > Failed to create certificate:
> > Unknown problem. rc = -272656776
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> Hope this helps
> 
> 
> Tim
> 
> -- 
> Timothy Frost			mailto:Timothy.Frost@eds.com
> EDS New Zealand			Fax: +64-4-495-0473
> 8 Gilmer Terrace			Phone: +64-4-495-0504
> P O Box 3647
> Wellington
> New Zealand
> 
> 


__________________________________________________
Do You Yahoo!?
Yahoo! Photos - Share your holiday photos online!
http://photos.yahoo.com/


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================