I am working on getting a VPN to work between a Nokia IP350 Check Point NG AI firewall/VPN enforcement module and a Nortel Contivity VPN box. It appears that everything is set right. We are using Simplified mode, and have setup a interoperable device for the Nortel box with the encryption domain set ass the subnet we need to get to. The topology tab of the Check Point object is defined properly, and the VPN domain is set as "all IP addresses behind gateway based on Topology information." I have tried disabling NAT both in the VPN community and by manually creating NAT rules (never both being set at the same time). We have checked all the settings to be sure everything is set the same on both sides (3DES+MD5, DH Group 2, etc.). We see the VPN tunnel come up (Main and Quick mode completions), but when we try to initiate traffic it either gives a non-descript encryption error, or we see the an encrypt, but no traffic on the Nortel side (depending on how we have played with the settings). Can anyone give any insight to potential areas to look at? Thank You, Christopher Hoff Security Engineer CCSA, CCSE+, CCSI, NMPA Cornerstone Solutions, Inc CONFIDENTIALITY NOTICE: This e-mail message and any attachments are for the exclusive and confidential use of the intended recipient(s) and may contain confidential and/or privileged information. Any unauthorized review, use, disclosure, distribution or action in reliance upon this message is prohibited without the expressed consent of the sender. If you are not the originally intended recipient, please contact the sender by reply e-mail and promptly destroy all copies of the original message and its attachments from your computer system.
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
