Nick Whitworth a écrit :
Hi,
hi,
I saw once a vpn that magically worked after we deleted the remote
gateway on the smartcenter and
recreated it with exaclty the same parameters.
if the vpn already works fine in one way, the settings should be ok.
could you just confirm that you're using the correct ip address for the
tunnel ?
(in the "link selection" for ngx).
We are attempting to setup a VPN between a VRRP cluster of NGX R60
firewalls and a Watchguard . From behind the Watchguard we can initiate
traffic to servers behind the NGX cluster across the tunnel but we
cannot send traffic in the opposite direction. The message below appears
in our logs:
Number: 968546
Date: 28Feb2007
Time: 15:28:48
Product: VPN-1 Pro/Express
Interface: eth2c1
Origin: VPNGATEWAY01
Type: Log
Action: Drop
Protocol: tcp
Service: smtp (25)
Source: local server
Destination: remote server
Rule: 13
Current Rule Number: 13-vpn-cluster01
Rule UID: {BCAA12B0-4322-43CF-989D-5FDE44446BBD}
Source Port: 45418
Encryption Scheme: IKE
VPN Peer Gateway: MAP_FW
Encryption Methods: ESP: 3DES + SHA1
Community: Detica_MAP_VPN
Subproduct: VPN
VPN Feature: VPN
Information: service_id: smtp
encryption fail reason: Packet is
dropped because there is no valid SA - please refer to solution sk19423
in SecureKnowledge Database for more information
Any ideas/suggestions welcome.
Thank you
Nick
This message should be regarded as confidential. If you have received this
email in error please notify the sender and destroy it immediately.
Statements of intent shall only become binding when confirmed in hard copy by
an authorised signatory. The contents of this email may relate to dealings
with other companies within the Detica Group plc group of companies.
Detica Limited is registered in England under No: 1337451.
Registered offices: Surrey Research Park, Guildford, Surrey, GU2 7YP, England.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
___________________________________________________________________________
Yahoo! Mail réinvente le mail ! Découvrez le nouveau Yahoo! Mail et son interface révolutionnaire.
http://fr.mail.yahoo.com
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
