Thank you for the suggestions. The firewall is 4.1, and I ran the fw fetch command, but the firewall kept returning a message stating that the management console was unreachable. I checked the hosts file on both machines, and made sure there were compatable entries. I then rebooted both the management console and the remote firewall, and ran the putkey commands again. Immediately after this I was able to establish a tunnel between the sites. -- Ryan Worthington Systems and Network Analyst "Difficile est satiram non scribere."
Reinhard Stich <[EMAIL PROTECTED]> Sent by: Mailing list for discussion of Firewall-1 <[email protected]> 06/11/2005 02:37 AM Please respond to Mailing list for discussion of Firewall-1 To: [email protected] cc: Subject: Re: [FW-1] reestablishing tunnel after IP change hi, are your firewalls 4.1 or NG? because you write something about putkey... did you install the policy with the new policy (new ip in policy). try local "fw fetch mgmt-ip" on the module. after that - do a reboot of your central gateway (or if it is NG delete all tunnels with "vpn tu"). after you have the new policy on the remote module try to esablish the VPN cheers reinhard At 03:19 11.06.2005, you wrote: >Good evening Gentlemen, > >Hopefully someone gets this mail soon and can help me out. I'm stuck here >at the office till this problem is resolved, and I'm trying to get out of >here as soon as I can. > >The issue is, we've had one of our remote offices move, and the IP address >of the outside connection has changed. I've changed the IP on the outside >facing interface and host file of the remote, and the host file and >network object on the local (management) firewall. I've run fw putkey on >both machines, but when I bring fw1 up on the remote, it cannot find the >management console and pulls its policy from itself (an old copy I would >imagine) > >Is there something I'm missing? Could it be that the putkey command hasn't >gone off correctly? >-- >Ryan Worthington >Systems and Network Analyst >IT Infrastructure Team >"Difficile est satiram non scribere." > > > >This message is confidential and may be privileged. It is >intended solely for the named addressee. If you are not the >intended recipient please inform us. Any unauthorised >dissemination, distribution or copying hereof is prohibited. >As we cannot guarantee the genuineness or completeness of >the information contained in this message, the statements >set forth above are not legally binding. > > >================================================= >To set vacation, Out-Of-Office, or away messages, >send an email to [EMAIL PROTECTED] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your >subscription options, email >[EMAIL PROTECTED] >================================================= -- Reinhard Stich ASSIST [EMAIL PROTECTED] Internet Security AG, 1150 Wien, Johnstrasse 29 Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= This message is confidential and may be privileged. It is intended solely for the named addressee. If you are not the intended recipient please inform us. Any unauthorised dissemination, distribution or copying hereof is prohibited. As we cannot guarantee the genuineness or completeness of the information contained in this message, the statements set forth above are not legally binding. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
