Thanks Earl,
Basically, I had a user already defined for IKE utilizing a preshared secret
key and was working OK. To test the hybrid mode, I then changed the
authentication scheme for this user from undefined to VPN-1 &firewall-1
password and assigned a password. Now, this user does not work using
firewall-1 password nor preshared secret. This should have worked since I
didn't mess around with the encryption methods, and as per your suggestion,
I did check again to make sure that all encrytion methods match.
Thanks...Charles
>From: "Hartley, Earl" <[EMAIL PROTECTED]>
>To: "'charles kings'" <[EMAIL PROTECTED]>,
>[EMAIL PROTECTED]
>Subject: RE: [FW1] Hybrid Mode
>Date: Fri, 8 Sep 2000 12:18:01 -0400
>
>
>Charles:
>
> Confirm that your client and server have common authentication
>capabilities (encryption methods/algorithms); that sounds like your
>problem.
>
> Earl Hartley
> Sr. Network
>Engineer
> Lehman
>Brothers, Inc.
>
> > -----Original Message-----
> > From: charles kings [SMTP:[EMAIL PROTECTED]]
> > Sent: Friday, September 08, 2000 11:49 AM
> > To: [EMAIL PROTECTED]
> > Subject: [FW1] Hybrid Mode
> >
> >
> > Greetings,
> >
> > I am trying to implement Hybrid Mode IKE for Securemote authentication
>and
> >
> > have followed all the instructions listed in the CheckPoints document
> > written by Joe Dipietro. While all steps checked, when I try to
> > authenticate with a user setup for IKE (DES), I get the following
>messega
> > at
> > the securemote client. " Negotiation with firewall at site x has fialed.
> > No
> > common authentication method with fw" The logs don't display anything
>at
> > all. Please not that prior to this setup I was able to authenticat
>using
> > IKE setups, but not anymore.
> >
> > Has anyone out there had the same problem? The version I am using are
>as
> > follow:
> >
> > FW - Gateway and management station (separate) ver 4.1 Build 41716
>strong.
> >
> > SecuRemote client - Secureclient ver 4.1 SP1-DES Build 4157
> >
> > Any help will be appreciated...Chuck
> >
>_________________________________________________________________________
> > Get Your Private, Free E-mail from MSN Hotmail at
>http://www.hotmail.com.
> >
> > Share information about yourself, create your own public profile at
> > http://profiles.msn.com.
> >
> >
> >
> >
>==========================================================================
> > ======
> > To unsubscribe from this mailing list, please see the instructions
>at
> > http://www.checkpoint.com/services/mailing.html
> >
>==========================================================================
> > ======
>
>
>================================================================================
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
>================================================================================
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
Share information about yourself, create your own public profile at
http://profiles.msn.com.
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
