Sounds like you need to refresh the authentication keys between the
devices.
http://support.checkpoint.com/kb/docs/public/firewall1/4_1/pdf/pixvpn.pd
f
Darrye L. Skinner
Lead Infrastructure Engineer
Information Services
ofc: 972.647.7018
fax:: 972.647.3716
dlskinner AT txi DOT com
-----Original Message-----
From: James Edwards [mailto:jedwards AT SOS.STATE.TX DOT US]
Sent: Wednesday, October 29, 2003 2:31 PM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] Cisco to CP VPN
We are trying to establish a VPN between a Cisco VPN 3030 and my old
Checkpoint 4.0 Firewall (don't shoot me, I'm working on it). We had it
set
up and working but made some changes and now it's broke even though we
have
reverted everything back to the way it was. The VPN seems to establish
the
tunnel then the Cisco box gets the following error:
10/29/2003 15:31:44.840 SEV=6 IKE/38 RPT=32581 10.10.10.10
Header invalid, missing SA payload! (next payload = 8)
We have checked everything we can think of. I'm pretty much a novice at
this VPN stuff so any help would be greatly appreciated.
Jim Edwards
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
