"For whatever reason, their system refuses to talk to the Watchguard"
IPSec and ISAKMP are well defined protocols. I've found the most common errors to be the following. 1)Phase 1 mismatch 2)Phase 2 mismatch 3)Pre-shared-key mismatch 4)Failure to pass ESP at the edges Sometimes either end will not support dead-peer-detection and you'll end up with one side holding onto a stale SA and the traffic will get hung up. My suggestion is to rehash the vendor-to-Watchguard issue. I apologize if the stuff mentioned above is already obvious to you. You can feel free to bounce IPSec questions off of me. I need more coffee before I re-read your detailed e-mail. Also, that's a pretty awesome domain name. Spicenet! Thanks, Lou Goddard Network Engineer 302-552-8053 [email protected] ------------------ CONFIDENTIALITY NOTICE --------------- This message, including any attachments, is for the sole use of the intended recipient(s) and may contain privileged confidential information protected by law. Any unauthorized review, use, disclosure or distribution of this message is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of this message. ------------------ CONFIDENTIALITY NOTICE --------------- --- To unsubscribe from enterasys, send email to [email protected] with the body: unsubscribe enterasys [email protected]
