Hello
It's usually a problem of NAT
Verify that your network is not Nated; if yes add a rule with no nat to
remote network
Bertrand
Karo Hakoma <karo.hakoma AT CYGATE DOT FI>@AMADEUS.US.CHECKPOINT.COM> le
19/01/2006 12:41:11
Veuillez répondre à Mailing list for discussion of Firewall-1
<FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
Envoyé par : Mailing list for discussion of Firewall-1
<FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
Pour : FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
cc :
Objet : [FW-1] FW1: Wrong peer gw for decrypted packet (VPN error code
02)
Hello,
has anybody faced problems with tunnel between 4.1 and R55 filters,
traffic from network behind R55 module to 4.1 works fine with reply
packets also but when trying
connection from network behind 4.1 filter to R55 network, R55 drops the
packet with error
Product: VPN-1 & FireWall-1
Interface: eth0
Origin: r55
Type: Log
Action: Drop
Protocol: icmp
Source: 192.168.34.10
Destination: dns (xx.xx.xx.xx)
Rule: 10
Encryption Scheme: IKE
VPN Peer Gateway: fw41 (xx.xx.xx.xx)
Encryption Methods: ESP: 3DES + MD5 + PFS
Information: ICMP: Echo Request
ICMP Type: 8
ICMP Code: 0
encryption failure: Wrong peer
gateway for decrypted packet (VPN Error code 02)
-Karo
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
[Filename: $RFC822.eml, Content-Type: application/octet-stream]
The attachment file in the message has been removed by eManager.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
