Firewall-1

[FW-1] [FW1] Strange problem with Site-to-Site VPN

Subject: [FW-1] [FW1] Strange problem with Site-to-Site VPN
From: Chontzopoulos Dimitris <dchontzo AT ABC DOT GR>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Fri, 26 May 2006 13:48:19 +0300
Hey Gurus,

I've been having one extremely strange problem with a Site-to-Site VPN.

The VPN is being established via a Leased-Line (not over the Internet) between 
our Firewall (Check Point Firewall-1/VPN-1 R55W AI)
and a CiSCO VPN Concentrator 3000 on the Client Side. What happens is that if 
the line between us goes down for a reason, our side
fails to identify that, so, it keeps encrypting the data without re-negotiating 
for new keys. The only way for the VPN to be
re-established is to manually clear my keys through "vpn tu" and then send then 
some traffic. After that, the VPN goes up again.

Now, I've never seen this happen before and I've got no problems at all with 
the rest of my remaining 40+ Site-to-Site VPN's with
other Clients through the Internet. This issue only happens with them. I also 
have 2 additional VPN's with other CiSCO VPN
Concentrator(s) 3000 without any problems.

Has anyone seen this before? Is there something I can do?

Cheers,


Dimitris

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>