-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Thomas Nilsen <Thomas.Nilsen AT ROXAR DOT COM> wrote:
>
> That would be fine if the VPN tunnels didn't work at all. But here we
> see most of the traffic passing thru, where only some gets dropped -
> within the same subnet.
If I remember right, in Traditional mode the hash methods are specified
on each encrypt rule. The behavior you see might result from having
most of your encrypt rules specifying the right method, but one rule is
specifying another method.
As others have said, VPN Communities avoid this problem entirely.
- --
David DeSimone == Network Admin == fox AT verio DOT net
"It took me fifteen years to discover that I had no
talent for writing, but I couldn't give it up because
by that time I was too famous. -- Robert Benchley
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iD8DBQFGE2mAFSrKRjX5eCoRAga8AJ4tV07ww5fCcwDzm+Y3P1w/ikYZuQCdGPwz
5gPSMApI6Px8WBg4Zib9BLo=
=+RBW
-----END PGP SIGNATURE-----
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
