FYI, I have also tried sk16536 which looks like it describes the problem, but that has not fixed the problem.
Chris -----Original Message----- From: Covington, Chris Sent: Tuesday, April 01, 2003 3:41 PM To: [EMAIL PROTECTED] Subject: Re: [FW-1] befvp41 to fp3 - works on linksys side Bob, Thanks for the followup. I don't think that applies in my case though; since the remote gateway is an Interoperable device (a Linksys) and not a Check Point Externally Management Gateway. Has anyone gotten a VPN working with a BEFVP41? What kind of tunnel settings did you use? Chris -----Original Message----- From: Bob Scipioni [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 01, 2003 1:51 PM To: [EMAIL PROTECTED] Subject: Re: [FW-1] befvp41 to fp3 - works on linksys side Chris, In Solution ID: 55.0.7778402.2722456 it states: # The remote firewall object is defined with the wrong version in the General tab as one possible cause. -Bob Covington, Chris wrote: >Hi All, > >I've setup a traditional main mode 3DES MD5 site-to-site vpn with a >linksys BEFVP41 to my Secureplatform FP3 HF2 box. Everything works >fine on the linksys side, but if I try to access anything on the >linksys's network from behind FW-1, I get the following errors: > >IKE: Quick Mode Received Notification from Peer: invalid id information >encryption failure: Error occured encryption fail reason: Packet is >dropped because there is no valid SA > >I've tried turning on and off Perfect Forward Secrecy, Aggressive mode, >etc. and it seems to not make any difference. The IKE settings are >identical on both ends. > >Is there anything I should I try differently? > >thanks, >Chris > >================================================= >To set vacation, Out Of Office, or away messages, >send an email to [EMAIL PROTECTED] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your >subscription options, email >[EMAIL PROTECTED] >================================================= > > -- Bob Scipioni <[EMAIL PROTECTED]> Vice President, Product Development Lucid Security Research & Product Development www.lucidsecurity.com ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
