[FW-1] Urgent: building a VPN between NG and a Netscreen (dynamic address)

[Nico De Ranter <nico@FW1-NOSPAMSONYCOM.COM>]

Hi,

I'm trying to setup a VPN between a Checkpoint firewall (running VPN-1 4.1,
management: NG) and a Netscreen-10 appliance.  The VPN works
fine when the Netscreen has a static address, whoever now the Netscreen
will move to a dialup connection with a dynamic IP-address.  If I try
to change the definition of the Netscreen object in NG to "dynamic address",
it is automaticaly changed from "interoperable VPN Device" to "Checkpoint
product installed" and I'm suddenly not allowed to build a IKE based VPN
using a pre-shared secret anymore.

Is there anybody who has any experience in setting up a VPN between
a Checkpoint firewall and a Netscreen dial-up client? Any pointers
to more info (www.phoneboy.com does not seem to have anything related
to "netscreen")?

Thanks in advance,

Nico

---------------------------------------------------------
 "It has been said that there are only two businesses that
  refer to customers as users: illegal drug trade and
               the computer industry."
---------------------------------------------------------
Nico De Ranter
Sony Service Center (SDCE/VPE-B)
Sint Stevens Woluwestraat 55 (Rue de Woluwe-Saint-Etienne)
1130 Brussel (Bruxelles), Belgium, Europe, Earth
Telephone: +32 2 724 86 41 Telefax: +32 2 726 26 86
e-mail: nico.deranter@sonycom.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================