Hello,
there is the possibility that the other side performs NAT for their system's
IP addresses. If so, you should try to ping that NATted address, not the
actual address of the server behind the remote gateway.
On 28/03/06, Tom Brown <tom.brown AT goodtechnology DOT com> wrote:
>
> > Did you see the second phase configuration at VPN Community ? I hope
> it's
> > misconfigured.
> >
> > If you have other VPN's connected to this CP gateway, you can getting
> > another problem with supernets.
>
> I can see decrypts coming in and they can actually ping a box on my LAN
> which is good but i can't ping them - I am seeing this in my logs
>
> encryption fail reason: Packet is dropped because there is no valid SA -
> please refer to solution sk19423 in SecureKnowledge Database for more
> information
>
> any more ideas as that knowledge base article does not really help?
>
> thanks
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
