Greetings,
I'm trying to use an AT&T supplied VPN client through our internal FW to
connect to an AT&T controlled VPN server. The VPN is established but I
can't fully communicate unless I configure a one-to-one NAT. The client is
configured to use UDP encapsulation, but it's not used by the client.
During the ISAKMP negotiation I see that FW-1 does not changed the source
port of the negotiations (UDP 500 <--> UDP 500). I believe this is
confusing the remote VPN server (which I suspect is looking for a NAT-T type
translation) and it is not requesting UDP encapsulation.
Anyone see this before (I've had no luck in the archives.)
Does anyone know of a way to force FW-1 to perform source port translation
on ISAKMP negotiation?
Thanks,
-Steve S.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
