Hi Marco, as I said to Dan, disabling PFS doesn't help in my case. I did that, but the packets have been droped with that mysterious message. I tried every adjustment, but nothing didn't help. The groups are the same on both sides and there are packets from time zu time, which are going through... I checked group 1 one both sides and that seemed to help :-)
Best regards from sunny Vienna, Radu -----Original Message----- From: Marco Supino [mailto:[EMAIL PROTECTED] Sent: Dienstag, 01. April 2003 18:30 To: [EMAIL PROTECTED] Subject: Re: [FW-1] NG - different DH groups Hi, Try disabling PFS, i couldnt run a VPN between a NG and 4.1 when PFS is turned on. Marco. Dragomirescu, Radu wrote: > Hi all, > > I just upgraded from 4.1 SP 5 to NG FP Hotfix2 and all my VPNs seem to have > the same problem: > > "encryption failure. Packet was decrypted with methods which are different > from the methods according to the security policy - Gateway and Peer use > different DH groups" > > Anyone here who already seen that error? The setting for IKE Phase 1 & 2 > seem to be the same... I also often installed the rules and rebooted the > firewalls. Yesterday evening I guessed the problem is solved, but today in > the morning there are the same errors in my log! > > Many thanks in advanced! > Radu > > ------------------------------------- > Radu Dragomirescu > EDS Austria > Core Infrastructure - Network Services > Donaucity-Stra?e 11 > A-1220 Wien > > Tel: +43-1-7988440-163 > Fax: +43-1-7988440-282 > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
