[FW-1] FW1: Wrong peer gw for decrypted packet (VPN error code 02)

[Karo Hakoma [Permanent Link]]

Hello,

has anybody faced problems with tunnel between 4.1 and R55 filters,
traffic from network behind R55 module to 4.1 works fine with reply 
packets also but when trying
connection from network behind 4.1 filter to R55 network, R55 drops the 
packet with error
Product:                        VPN-1 & FireWall-1
Interface:                       eth0
Origin:                           r55
Type:                             Log
Action:                           Drop
Protocol:                       icmp
Source:                         192.168.34.10
Destination:                  dns  (xx.xx.xx.xx)
Rule:                             10
Encryption Scheme:     IKE
VPN Peer Gateway:      fw41 (xx.xx.xx.xx)
Encryption Methods:    ESP: 3DES + MD5 + PFS
Information:                  ICMP: Echo Request
                                     ICMP Type: 8
                                     ICMP Code: 0
                                     encryption failure: Wrong peer 
gateway for decrypted packet (VPN Error code 02)
-Karo

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================