Rob, Yes mine automatically connects. Do you have the latest firmware? Did you turn on the "Keep-alive" in the Advanced tunnel page?
Chris -----Original Message----- From: RG [mailto:[EMAIL PROTECTED] Sent: Friday, April 04, 2003 2:09 PM To: [EMAIL PROTECTED] Subject: Re: [FW-1] befvp41 to fp3 - works on linksys side Are you guys able to get the vpn to come up automagically from the linksys side by generating traffic to the remote side? Other than having to manually connect, i have no problems with linksys to checkpoint vpns. -Rob At 09:42 PM 4/3/2003 -0500, you wrote: >Vic, > >But can you get from your office network back into your Linksys's >network? I have no problems using it from behind the Linksys either. >To fix that problem, I would go to the advanced properties of the >tunnel (on the linksys) and pick "Keep-alive" > >Chris > >-----Original Message----- >From: Vic G [mailto:[EMAIL PROTECTED] >Sent: Thursday, April 03, 2003 8:39 PM >To: [EMAIL PROTECTED] >Subject: Re: [FW-1] befvp41 to fp3 - works on linksys side > > >Chris: > >I'm just setting this up also (except it's a BEFXS41). >I'm using NG-FP3-HF2 at the host end. >I have CP in "quick" mode, (not traditional) and am sucessfully >connected to another CP-FP3-HF2 system at my remote plant so I know I >have VPN working at least CP to CP. > >Now I want to add this Linksys device at my home to see if I can VPN >in. I installed this evening. I can get "connected", but after about an >hour or so, it becomes "disconnected". I cannot re-establish the >connection with a ping, I need to go back into the Linksys config >screen and click the "connect" button again. > >Not sure whats up with this, but I've increased the key re-negoicate to >28,800 seconds to see what effect that has... > >So it work for me.. kinda! > >Vic >============================== > > >From: "Covington, Chris" <[EMAIL PROTECTED]> > >Reply-To: Mailing list for discussion of Firewall-1 > ><[EMAIL PROTECTED]> > >To: [EMAIL PROTECTED] > >Subject: Re: [FW-1] befvp41 to fp3 - works on linksys side > >Date: Wed, 2 Apr 2003 13:43:27 -0500 > > > >Bob, > > > >Yes as far as I can tell, they are within a minute of each other > >time-wise. I'm wondering if it's a FP3 HF2 bug. I wish there was > >some > > >way to see exactly what FP3 is doing when the Linksys tells it > >"invalid-id-information" > > > >Chris > > > >-----Original Message----- > >From: Bob Scipioni [mailto:[EMAIL PROTECTED] > >Sent: Wednesday, April 02, 2003 12:26 PM > >To: [EMAIL PROTECTED] > >Subject: Re: [FW-1] befvp41 to fp3 - works on linksys side > > > > > >Chris, > > > >I don't recall anything being said earlier, but have you made sure > >there isn't any significant time offset between the two gateways? > > > >-Bob > > > > > >Covington, Chris wrote: > > > > >Sorry for all the postings... Here are the error messages on the > > >Linksys (whenever I try to access from behind FW-1): > > > > > >2003-04-01 21:32:29 IKE[8] Set up ESP tunnel with (MYIP) Success ! > > >2003-04-01 21:32:29 2003-04-01 21:34:16 IKE[8] Rx << QM_I1 : (MYIP) > > >HASH, SA, NONCE, KE, ID, ID 2003-04-01 21:34:16 IKE[8] **Check your > > >Local/Remote Secure Group settings ! 2003-04-01 21:34:16 IKE[8] Tx > > >>> Notify : INVALID-ID-INFORMATION 2003-04-01 21:34:37 > > >2003-04-01 21:34:37 IKE[8] Tx >> MM_I1 : (MYIP) SA > > >2003-04-01 21:34:38 IKE[8] Rx << MM_R1 : (MYIP) SA > > >2003-04-01 21:34:38 IKE[8] ISAKMP SA CKI=[a5e2cfae f6359b46] > > >CKR=[dd2652ff a064e41c] > > >2003-04-01 21:34:38 IKE[8] ISAKMP SA 3DES / MD5 / PreShared / >MODP_1024 > > >/ 28800 sec (*28800 sec) > > >2003-04-01 21:34:38 IKE[8] Tx >> MM_I2 : (MYIP) KE, NONCE > > >2003-04-01 21:34:38 IKE[8] Rx << MM_R2 : (MYIP) KE, NONCE > > >2003-04-01 21:34:38 IKE[8] Tx >> MM_I3 : (MYIP) ID, HASH 2003-04-01 > > >21:34:39 IKE[8] Rx << MM_R3 : (MYIP) ID, HASH 2003-04-01 21:34:39 > > >IKE[8] Tx >> QM_I1 : (MYIP) HASH, SA, NONCE, KE, > >ID, > > >ID > > >2003-04-01 21:34:39 IKE[8] Rx << QM_R1 : (MYIP) HASH, SA, NONCE, > > >KE, > >ID, > > >ID > > >2003-04-01 21:34:39 IKE[8] Tx >> QM_I2 : (MYIP) HASH 2003-04-01 > > >21:34:39 IKE[8] ESP_SA 3DES / SHA / 3600 sec (*3600 sec) / > > >SPI=[c99d6e8b:c47dbb84] 2003-04-01 21:34:39 IKE[8] Set up ESP > > >tunnel with (MYIP) Success ! > > > > > >Chris > > > > > >-----Original Message----- > > >From: Covington, Chris > > >Sent: Tuesday, April 01, 2003 5:33 PM > > >To: [EMAIL PROTECTED] > > >Subject: Re: [FW-1] befvp41 to fp3 - works on linksys side > > > > > > > > >FYI, > > > > > >I have also tried sk16536 which looks like it describes the > > >problem, but that has not fixed the problem. > > > > > >Chris > > > > > >-----Original Message----- > > >From: Covington, Chris > > >Sent: Tuesday, April 01, 2003 3:41 PM > > >To: [EMAIL PROTECTED] > > >Subject: Re: [FW-1] befvp41 to fp3 - works on linksys side > > > > > > > > >Bob, > > > > > >Thanks for the followup. I don't think that applies in my case > > >though; > > > > >since the remote gateway is an Interoperable device (a Linksys) and > > >not > > > > >a Check Point Externally Management Gateway. > > > > > >Has anyone gotten a VPN working with a BEFVP41? What kind of > > >tunnel settings did you use? > > > > > >Chris > > > > > >-----Original Message----- > > >From: Bob Scipioni [mailto:[EMAIL PROTECTED] > > >Sent: Tuesday, April 01, 2003 1:51 PM > > >To: [EMAIL PROTECTED] > > >Subject: Re: [FW-1] befvp41 to fp3 - works on linksys side > > > > > > > > >Chris, > > > > > >In Solution ID: 55.0.7778402.2722456 it states: > > > > > ># The remote firewall object is defined with the wrong version in > > >the > > > >General tab > > > > > >as one possible cause. > > > > > >-Bob > > > > > > > > >Covington, Chris wrote: > > > > > > > > > > > >>Hi All, > > >> > > >>I've setup a traditional main mode 3DES MD5 site-to-site vpn with > > >>a linksys BEFVP41 to my Secureplatform FP3 HF2 box. Everything > > >>works fine on the linksys side, but if I try to access anything on > > >>the linksys's network from behind FW-1, I get the following > > >>errors: > > >> > > >>IKE: Quick Mode Received Notification from Peer: invalid id > > >>information > > >> > > >> > > > > > > > > > > > >>encryption failure: Error occured encryption fail reason: Packet > > >>is dropped because there is no valid SA > > >> > > >>I've tried turning on and off Perfect Forward Secrecy, Aggressive > > >>mode, > > >> > > >> > > > > > > > > > > > >>etc. and it seems to not make any difference. The IKE settings > > >>are identical on both ends. > > >> > > >>Is there anything I should I try differently? > > >> > > >>thanks, > > >>Chris > > >> > > >>================================================= > > >>To set vacation, Out Of Office, or away messages, > > >>send an email to [EMAIL PROTECTED] > > >>in the BODY of the email add: > > >>set fw-1-mailinglist nomail > > >>================================================= > > >>To unsubscribe from this mailing list, > > >>please see the instructions at > > >>http://www.checkpoint.com/services/mailing.html > > >>================================================= > > >>If you have any questions on how to change your subscription > > >>options, email [EMAIL PROTECTED] > > >>================================================= > > >> > > >> > > >> > > >> > > > > > >-- > > >Bob Scipioni <[EMAIL PROTECTED]> > > >Vice President, Product Development > > >Lucid Security > > >Research & Product Development > > >www.lucidsecurity.com > > > > > > > > > > > >================================================= > > >To set vacation, Out Of Office, or away messages, > > >send an email to [EMAIL PROTECTED] > > >in the BODY of the email add: > > >set fw-1-mailinglist nomail > > >================================================= > > >To unsubscribe from this mailing list, > > >please see the instructions at > > >http://www.checkpoint.com/services/mailing.html > > >================================================= > > >If you have any questions on how to change your subscription > > >options, email [EMAIL PROTECTED] > > >================================================= > > > > > >================================================= > > >To set vacation, Out Of Office, or away messages, > > >send an email to [EMAIL PROTECTED] > > >in the BODY of the email add: > > >set fw-1-mailinglist nomail > > >================================================= > > >To unsubscribe from this mailing list, > > >please see the instructions at > > >http://www.checkpoint.com/services/mailing.html > > >================================================= > > >If you have any questions on how to change your subscription > > >options, email [EMAIL PROTECTED] > > >================================================= > > > > > >================================================= > > >To set vacation, Out Of Office, or away messages, > > >send an email to [EMAIL PROTECTED] > > >in the BODY of the email add: > > >set fw-1-mailinglist nomail > > >================================================= > > >To unsubscribe from this mailing list, > > >please see the instructions at > > >http://www.checkpoint.com/services/mailing.html > > >================================================= > > >If you have any questions on how to change your subscription > > >options, email [EMAIL PROTECTED] > > >================================================= > > > > > >================================================= > > >To set vacation, Out Of Office, or away messages, > > >send an email to [EMAIL PROTECTED] > > >in the BODY of the email add: > > >set fw-1-mailinglist nomail > > >================================================= > > >To unsubscribe from this mailing list, > > >please see the instructions at > > >http://www.checkpoint.com/services/mailing.html > > >================================================= > > >If you have any questions on how to change your subscription > > >options, email [EMAIL PROTECTED] > > >================================================= > > > > > > > > > >-- > >Bob Scipioni <[EMAIL PROTECTED]> > >Vice President, Product Development > >Lucid Security > >Research & Product Development > >www.lucidsecurity.com > > > > > > > >================================================= > >To set vacation, Out Of Office, or away messages, > >send an email to [EMAIL PROTECTED] > >in the BODY of the email add: > >set fw-1-mailinglist nomail > >================================================= > >To unsubscribe from this mailing list, > >please see the instructions at > >http://www.checkpoint.com/services/mailing.html > >================================================= > >If you have any questions on how to change your > >subscription options, email > >[EMAIL PROTECTED] > >================================================= > > > >================================================= > >To set vacation, Out Of Office, or away messages, > >send an email to [EMAIL PROTECTED] > >in the BODY of the email add: > >set fw-1-mailinglist nomail > >================================================= > >To unsubscribe from this mailing list, > >please see the instructions at > >http://www.checkpoint.com/services/mailing.html > >================================================= > >If you have any questions on how to change your > >subscription options, email > >[EMAIL PROTECTED] > >================================================= > > >_________________________________________________________________ >MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. >http://join.msn.com/?page=features/virus > >================================================= >To set vacation, Out Of Office, or away messages, >send an email to [EMAIL PROTECTED] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your >subscription options, email >[EMAIL PROTECTED] >================================================= > >================================================= >To set vacation, Out Of Office, or away messages, >send an email to [EMAIL PROTECTED] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your >subscription options, email >[EMAIL PROTECTED] >================================================= Robert Geller, CCSA, CCSE Sportsline Network Operations 2200 West Cypress Creek Rd. Fort Lauderdale, Florida 33309 -954-351-2120 x4528 AIM: rg1454bb ICQ: 451690 http://cbs.sportsline.com ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
