Firewall-1

Re: [FW-1] Gateway doesn't support UDP encapsulation ?

Subject: Re: [FW-1] Gateway doesn't support UDP encapsulation ?
From: Luiz Afonso <luiz_ma AT YAHOO DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Fri, 19 Dec 2003 06:28:36 -0800
Hi Michael,

Perfect. Now it works fine.

Thanks for your help,
Luiz

--- Michael Schwartzkopff <ccse_fw1 AT MULTINET DOT DE>
wrote:
> Hi,
>
> use dbedit to check if userc_IKE_NAT is false. Set
> it to true.
>
> Am Freitag, 19. Dezember 2003 13:42 schrieben Sie:
> > Hi,
> >
> > I'm trying to connect to a VPN-1 NG AI R55 gateway
> > using SecuRemote R55 client with "Force UDP
> > Encapsulation" and "IKE over TCP" Enabled,
> > to overcome NAT issues.
> >
> > I double checked all the configuration items,
> > including "NAT Traversal" support in
> Gateway/Remote
> > Access, which is enabled.
> >
> > When I try to connect, IKE main mode completes
> > successfully, but then the following message shows
> up
> > in log:
> > "Reason: Client Encryption: 'Force UDP
> Encapsulation'
> > selected on user's profile, but gateway doesn't
> > support UDP Encapsulation."
> >
> > Any ideas ?
> >
> > Thanks,
> > Luiz
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================


__________________________________
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>