That would be fine if the VPN tunnels didn't work at all. But here we
see most of the traffic passing thru, where only some gets dropped -
within the same subnet.
Thomas
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of David
DeSimone
Sent: Wednesday, April 04, 2007 2:59 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] NGX RX65 and Edge VPN troubles
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Thomas Nilsen <Thomas.Nilsen AT ROXAR DOT COM> wrote:
>
> Problem still persists and with the same error: "different hash
> methods". I'm out of ideas.
"hash methods" are encryption parameters. One gateway might be using
3DES-MD5 while the other uses 3DES-SHA1. Check the VPN community
against the traditional-mode rules to make sure the parameters match up.
DISCLAIMER:
This message contains information that may be privileged or confidential and is
the property of the Roxar Group. It is intended only for the person to whom it
is addressed. If you are not the intended recipient, you are not authorised to
read, print, retain, copy, disseminate, distribute, or use this message or any
part thereof. If you receive this message in error, please notify the sender
immediately and delete all copies of this message.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
