Re: [FW-1] FW1: Wrong peer gw for decrypted packet (VPN error code 02)

[fwguru [Permanent Link]]

What HFA level are you running on the R55 gateway?


Neil Delacruz


On 1/19/06, Karo Hakoma <karo.hakoma AT cygate DOT fi> wrote:
>
> Hello,
>
> has anybody faced problems with tunnel between 4.1 and R55 filters,
> traffic from network behind R55 module to 4.1 works fine with reply
> packets also but when trying
> connection from network behind 4.1 filter to R55 network, R55 drops the
> packet with error
>
> Product:                        VPN-1 & FireWall-1
> Interface:                       eth0
> Origin:                           r55
> Type:                             Log
> Action:                           Drop
> Protocol:                       icmp
> Source:                         192.168.34.10
> Destination:                  dns  (xx.xx.xx.xx)
> Rule:                             10
> Encryption Scheme:     IKE
> VPN Peer Gateway:      fw41 (xx.xx.xx.xx)
> Encryption Methods:    ESP: 3DES + MD5 + PFS
> Information:                  ICMP: Echo Request
>                                      ICMP Type: 8
>                                      ICMP Code: 0
>                                      encryption failure: Wrong peer
> gateway for decrypted packet (VPN Error code 02)
>
> -Karo
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================