Hi,
We have a 6000 series asf in HA with a VPN established to another ASF 6000
xboth running AI R55 ...the VPN tunnel between 6000x to the one in HA works
fine but when a tunnel is initiated from the management server (ping from
management server of ASF in HA to anotehr node behind another ASF)of the ASF
of HA we get a Invalid SA and ESP udp 50 is dropped due to warning "Warning
replay attack"...the source being the MIP and destination being the external
Ip of non HA ASF
ANy help/pointers would be appreciated
1)The subnets offered both sides match(encryption domain offers MIP subnet
and is same on both sides)
2)Preshared key matches
Thanks and regards
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
