[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] FW-1 to PIX VPN
Greg, Ensure that your IKE and IPSEC timeouts are the same on both the PIX and FW-1. These are normally set to 14400 minutes (1 week) and 3600 seconds on the FW-1 and 86400 seconds (1 day) and 3600 seconds on the PIX. If they don't match exactly, neither box will negotiate. Jim -----Original Message----- From: Net Secure [mailto:[email protected]] Sent: Friday, 5 January 2001 11:27 a.m. To: [email protected] Subject: [FW1] FW-1 to PIX VPN Does anyone know of an issue creating a VPN from FW-1 to PIX. The PIX is version 5.23 the firewall is a Nokia 440 fw 4.0 sp4 ipso 3.2.1. I have followed the documentation from Check Point and get the following errors: If the VPN is attempted from the FW-1 side; no proposal chosen. >From the PIX; fails on the 2nd stage of key negotiation. Thanks, -Greg ----------------------------------------------- FREE! The World's Best Email Address @email.com Reserve your name now at http://www.email.com ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|